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Dear  Colleagues: 

The  Special  Committee  on. the  Year  2000  Technology  Problem  was  created  on 
April  2,  1998  by  unanimous  consent  of  the  Senate.  Despite  its  short  tenure,  the 
Committee  has  logged  a  staggering  number  of  hours  addressing  the  Y2K  issue, 
conducting  interviews  and  writing  letters  to  federal  agencies,  industry  trade 
groups,  and  corporate  executives.  The  Committee  has  conducted  10  hearings, 
asked  difficult  questions,  and  requested  reports  on  a  breathtaking  range  of 
affected  industries.  The  Committee  is  among  the  most  broad-based,  best- 
informed  bodies  in  existence,  yet  it  cannot  predict  what  will  occur  on  January  1, 
2000.  The  data  simply  does  not  exist. 

The  attached  report  embodies  the  Committee’s  best  evaluation  of  the  current 
Y2K  environment.  We  have  made  a  difference.  By  placing  Y2K  in  the  public 
eye,  and  by  holding  individuals  publicly  accountable  for  Y2K  preparation,  the 
Committee  has  engaged  people  and  associations  in  the  Y2K  issue  who 
otherwise  may  have  remained  ignorant  of  the  significance  of  the  Y2K  problem. 

We  are  pleased  with  the  advances  in  awareness  and  Y2K  remediation  that  we 
have  seen  since  the  inception  of  the  Committee,  but  much  work  remains.  In 
1999,  the  Committee  will  continue  to  assess  and  hold  hearings  on  the  domestic 
sectors.  While  the  Committee  is  growing  more  comfortable  with  the  level  of 
domestic  preparedness,  we  have  far  less  confidence  in  the  international  arena. 
For  that  reason,  the  level  of  international  Y2K  preparedness  and  the  effects  that 
poorly  prepared  countries  may  have  on  the  United  States  will  be  a  major  focus  of 
the  Committee’s  work  in  the  106th  Congress. 


The  Y2K  problem  is  undoubtedly  one  of  the  most  important  issues  we  will  face 
this  year,  and  as  such,  deserves  our  top  priority.  I  encourage  each  of  you  to  read 
this  report  and  engage  the  Y2K  issue  in  your  committees  and  in  your  home 


Chairman  Vice  Chairman 
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EXECUTIVE  SUMMARY 


The  Committee  has  found  that  the 
most  frustrating  aspect  of  addressing 
the  Year  2000  (Y2K)  problem  is 
sorting  fact  from  fiction.  Reports 
from  even  the  most  reputable  news 
sources  fall  prey  to  polarizing 
forces — either  over  emphasizing  a 
handful  of  Y2K  survivalists,  or  dow  n- 
playing  the  event  as  a  hoax  d  e- 
signed  to  sell  information  technology 
equipment. 

The  Internet  surges  with  rumors  of 
massive  Y2K  test  failures  that  turn 
out  to  be  gross  misstatements,  while 
image-sensitive  corporations  dow  n- 
play  real  Y2K  problems.  The  good 
news  is  that  talk  of  the  death  of  civil  i- 
zation,  to  borrow  from  Mark  Twain, 
has  been  greatly  exaggerated.  The 
bad  news  is  that  Committee  re¬ 
search  has  concluded  that  the  Y2K 
problem  is  very  real  and  that  Y2K 
risk  management  efforts  must  be  i  n- 
creased  to  avert  serious  disru  ptions. 

Y2K  is  about  more  than  the  failure  of 
an  individual’s  personal  computer  or 
an  incorrect  date  in  a  spreadsheet. 
As  one  examines  the  multiple  layers 
of  systems  and  technologies  that 
support  our  everyday  lives,  the  p  o- 
tential  Y2K  problems  increase  exp  o- 
nentially.  The  interdependent  nature 
of  technology  systems  makes  the 
severity  of  possible  disruptions  diff  i- 
cult  to  predict.  Adding  to  the  conf  u- 
sion,  there  are  still  very  few  overall 
Y2K  technology  compliance  a  s- 
sessments  of  infrastructure  or  indu  s- 
try  sectors.  Consequently,  the  fu  n- 
damental  questions  of  risk  and  pe  r- 


sonal  preparedness  cannot  be  a  n- 
swered  at  this  time. 

On  the  positive  side,  Y2K  awareness 
is  growing.  In  the  past  year,  both 
public  and  private  institutions  have 
doubled  their  efforts  to  find,  evaluate, 
and  address  Y2K  risk  exposure.  The 
Committee  has  seen  a  significant 
amount  of  progress  since  its  ince  p- 
tion.  However,  Senate  hearings,  i  n- 
terviews,  and  research  have  not  pr  o- 
duced  convincing  evidence  that  the 
Y2K  problem  is  well  in  hand. 

The  biggest  Y2K  impact  may  occur 
internationally.  While  the  U.S. 
should  have  started  its  Y2K  prepar  a- 
tions  earlier,  worldwide  preparations 
generally  lag  even  further  behind. 

OVERALL  OBSERVATIONS 

Many  organizations  critical  to 
Americans’  safety  and  well-being 
are  still  not  fully  engaged  in  fin  d- 
ing  a  solution. 

For  example,  over  90%  of  doctors' 
offices  and  50%  of  small-  and  m  e- 
dium-sized  businesses  have  yet  to 
address  the  problem.  Larger  firms 
have,  in  general,  grasped  how  a  Y2K 
failure  could  severely  impact  their 
businesses  and  are  taking  steps  to 
remedy  the  problem.  Smaller  firms 
remain  more  focused  on  what  they 
perceive  as  more  immediate  co  n- 
cerns,  which  in  many  cases  do  not 
include  Y2K. 
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Most  affected  industries  and  o  r- 
ganizations  started  Y2K  remedi  a- 
tion  too  late. 

As  a  result,  many  organizations  must 
exercise  "triage"— focusing  on  what 
is  critical  to  sustain  the  life  of  the 
enterprise  as  opposed  to  finding 
long-term  solutions. 

Self-reporting  has  yielded  unrel  i- 
able  assessments  for  most  indu  s- 
try  sectors.  With  few  exceptions, 
disclosure  of  Y2K  compliance  is 
poor. 

Analogous  to  letting  students  grade 
their  own  tests,  self-reporting  offers 
data  of  varying  reliability.  Noneth  e- 
less,  it  has  become  the  standard  in 
both  private  industry  and  gover  n- 
ment.  Industry  surveys  are  currently 
the  most  widely  utilized  tool  to 
measure  compliance.  Unfortunately, 
the  results  of  many  surveys  have 
been  kept  from  public  and  Special 
Committee  view  (see  "Transporta¬ 
tion"  in  this  report).  Despite  an  SEC 
rule  requiring  Y2K  disclosure  of  pu  b- 
lic  corporations,  companies  are  r  e- 
luctant  to  report  poor  compliance 
levels. 

Fear  of  litigation  and  loss  of  co  m- 
petitive  advantage  are  the  most 
commonly  cited  reasons  for  bare- 
bones  disclosure. 

Although  sharing  Y2K  data  could 
save  time  in  companies’  remediation 
and  contingency  planning  efforts, 
such  cooperation  has  not  been  fort  In¬ 
coming.  To  encourage  greater  di  s- 
closure,  the  Committee  spearheaded 
a  bipartisan  effort  that  passed  the 
Year  2000  Information  Readiness 
and  Disclosure  Act  (S.2392)  and  i  n- 


troduced  the  CRASH  Protection  Act 
(S.1518).  The  Year  2000  Inform  a- 
tion  Readiness  and  Disclosure  Act 
provided  a  basic  level  of  protection 
for  Y2K  statements  made  in  good 
faith.  The  CRASH  Protection  Act 
pressured  the  SEC  to  require  more 
meaningful  Y2K  corporate  disclosure 
to  shareholders. 

More  legislation  may  be  necessary 
to  address  Y2K  litigation.  Some  I  i- 
ability  cost  projections  are  as  high  as 
$1  trillion.  Serious  doubts  exist  as 
to  whether  or  not  the  present  judicial 
system  could  handle  a  potentially 
monstrous  wave  of  litigation. 

The  Committee  plans  to  address 
certain  key  sectors  in  1999  where 
there  has  been  extreme  reluctance 
to  disclose  Y2K  compliance. 

National  emergency  and  security 
planning  for  Y2K-related  systems 
failures  is  just  begi  nning. 

FEMA  contingency  plans  are  in  draft 
form,  but  there  is  no  national,  strat  e- 
gic  plan  to  assure  that  critical  infr  a- 
structures  will  continue  to  function. 

This  is  partially  due  to  varying  levels 
of  state  and  local  government  pre¬ 
paredness.  State  and  local  gover  n- 
ments  represent  the  first  line  of  d  e- 
fense  in  emergency  situations,  and 
emergency  planning  is  difficult  wit  fl¬ 
out  their  full  involvement.  A  recent 
Labor  Department  report  stated  that 
several  states  are  lagging  in  specific 
Y2K  system  repairs  relating  to  fede  r- 
ally  funded  programs. 
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Leadership  at  the  highest  levels  is 
lacking. 

A  misconception  pervades  corporate 
boardrooms  that  Y2K  is  strictly  a 
technical  problem  that  does  not  wa  r- 
rant  executive  attention.  Some  go  v- 
ernment  sectors  lack  clear  directives 
and  policies  on  Y2K. 

SECTOR  ASSESSMENTS 

Since  its  establishment  in  April  1 998, 
the  Special  Committee  has  held  nine 
hearings  on  seven  critical  economic 
sectors: 

•  Utilities 

•  Health  care 

•  Telecommunications 

•  Transportation 

•  Financial  institutions 

•  Government 

•  General  business 


The  eighth  sector,  Litigation,  will  be 
addressed  in  early  1999. 

The  Committee  plans  to  revisit  each 
of  the  sectors  in  1 999,  with  emphasis 
on  litigation  and  the  addition  of  inte  r- 
national  concerns  to  the  list  of  critical 
sectors.  The  Committee  will  assess 
the  nation’s  progress  toward  Y2K 
compliance  and  pinpoint  problem  a  r- 
eas.  The  Committee  will  also  co  n- 
tinue  to  provide  recommendations  to 
Congress  for  legislative  action. 

UTILITIES 

While  some  compliance  efforts 
are  behind,  the  utility  industry  as 


a  whole  is  configured  to  handle 
interruptions,  blackouts,  and 
natural  disasters.  A  prolonged, 
nationwide  blackout  is  not  likely 
to  occur.  However,  local  and  r  e- 
gional  outages  remain  a  distinct 
possibility  depending  upon  the 
overall  preparedness  of  the  ind  i- 
vidual  electric  utility  serving  a 
given  area. 

The  nation's  electric  power  industry 
comprises  3,200  independent  util  i- 
ties.  Overall  remediation  of  the 
electric  power  industry  is  slow.  A  c- 
cording  to  NERC,  only  about  50%  of 
the  utilities  had  completed  Y2K  re¬ 
mediation  as  of  December  1998. 
Failure  of  some  parts  of  the  electric 
industry's  system  is  likely,  but  the 
Committee  does  not  expect  the  i  n- 
tegrity  of  the  overall  power  grid  to  be 
compromised.  Of  greatest  concern 
are  approximately  1,000  small,  rural 
electric  utilities  that  may  not  have  the 
resources  to  devote  to  Y2K  compl  i- 
ance. 

Compliance  among  oil  and  natural 
gas  utilities  is  also  progressing 
slowly.  A  survey  by  the  Committee, 
while  limited  in  scope,  indicates  a 
lack  of  contingency  planning,  overly 
optimistic  assertions  that  compliance 
will  be  complete,  and  a  lack  of 
knowledge  about  suppliers'  Y2K 
status. 

HEALTH  CARE 

The  health  care  industry  lags  si  g- 
nificantly  in  its  Y2K  preparations 
compared  to  other  sectors.  B  e- 
cause  of  limited  resources  and 
lack  of  awareness,  rural  and  i  nner- 
city  hospitals  have  particularly 
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high  Y2K  risk  exposure. 

Health  care  is  the  nation's  single 
largest  industry,  generating  $1.5  tri  I- 
lion  annually.  There  are  6,000  ho  s- 
pitals,  800,000  doctors  and  50,000 
nursing'  homes,  as  well  as  hundreds 
of  biomedical  equipment  manufa  c- 
turers  and  suppliers  of  blood,  drugs, 
linens  and  bandages — and  health 
care  insurers— that  may  be  unpre¬ 
pared  for  the  year  2000. 

According  to  a  report  by  the  Gartner 
Group,  64%  of  hospitals— primarily 
smaller  hospitals — have  no  plans  to 
test  their  Y2K  remediation  efforts.  In 
addition,  90%  of  physicians’  offices 
are  unaware  of  their  Y2K  exposure. 
Struggling  compliance  efforts  by 
HCFA  (the  agency  that  oversees 
Medicare)  and  unaddressed  co  n- 
cerns  about  medical  devices  are 
major  roadblocks  to  the  industry's 
Y2K  readiness. 

TELECOMMUNICATIONS 

A  massive  industry-wide  effort  is 
underway  to  assess  the  impact  of 
Y2K  on  telecommunications.  The 
initial  interoperability  testing  ind  i- 
cates  that  the  U.S.  communic  a- 
tions  will  transition  without  si  g- 
nificant  problems.  Currently, 
more  than  80%  of  public  network 
systems  have  been  tested  and  are 
considered  compliant. 

The  telecommunications  industry 
has  spent  billions  on  Y2K  fixes  and 
should  have  99%  of  access  lines  in 
compliance  by  the  fall  1999.  Cu  r- 
rently,  industry  and  government  are 
working  together  to  coordinate  co  n- 
tingency  plans  in  case  there  are  fai  I- 


ures.  Industry  in  U.S.  and  overseas 
has  established  warning  networks  to 
alert  each  other  of  Y2K  pro  blems. 

TRANSPORT  ATION 

The  transportation  sector  is  the 
linchpin  for  just-in-time  inventory 
management  across  most  every 
sector,  from  health  care  supplies 
to  food.  The  Y2K  readiness  of  this 
sector  is  critical  to  our  global 
economy.  Planes  will  not  fall  out 
of  the  sky,  but  disruption  of  flights 
and  global  trade  between  some 
areas  and  countries  may  occur. 

On  average,  the  nation's  670  do¬ 
mestic  airports  started  Y2K  compl  i- 
ance  too  late.  The  Federal  Aviation 
Agency  has  made  great  strides  in 
the  past  year,  but  remains  at  risk. 
The  situation  with  international  air 
traffic  control  and  airports  is  much 
more  severe.  The  maritime  shipping 
industry  has  not  moved  aggressively 
toward  compliance.  Public  transit 
could  be  seriously  disrupted. 

FINANCE 

ATMs  are  expected  to  function 
correctly  and  banks  should  have 
adequate  cash  to  meet  consumer 
demand,  based  on  a  Federal  R  e- 
serve  estimate  that  each  American 
household  will  withdraw  an  ave  r- 
age  of  $500.  The  securities  indu  s- 
try  has  responded  well  to  its  i  n- 
temal  Y2K  issues  and  has  unde  r- 
taken  expansive  testing.  Ho  w- 
ever,  fund  managers  and  brokers 
have  only  recently  started  to  co  n- 
sider  the  implication  of  corporate 
Y2K  vulnerability  on  investment 
decisions. 
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The  financial  services  sector  ranks 
ahead  of  nearly  all  other  industries  in 
its  remediation  and  testing  efforts. 
Legislation  in  Congress  and  action 
by  the  Committee  have  led  to  legal 
requirements  on  broker-dealers  and 
publicly  traded  companies  to  di  s- 
close  compliance  inform  ation. 

Federal  regulators  have  made  co  n- 
siderable  progress  in  tracking  co  m- 
pliance  among  banks,  thrifts  and 
credit  unions,  of  which  95%  have  r  e- 
ceived  satisfactory  government  ra  t- 
ings. 

GOVERNMENT 

Several  state  and  many  local  go  v- 
emments  lag  in  Y2K  remediation, 
raising  the  risk  of  service  disru  p- 
tion.  The  federal  government  will 
spend  in  excess  of  $7.5  billion  and 
will  not  be  able  to  renovate,  test, 
and  implement  all  of  its  mission 
critical  systems  in  time.  However, 
wholesale  failure  of  federal  go  v- 
ernment  services  is  not  likely  to 
occur. 

The  Committee’s  work  in  this  sector 
includes  national  emergency  pla  n- 
ning  as  well  as  federal,  state,  and 
local  government  preparedness. 
After  a  late  start,  FEMA  is  now  e  n- 
gaged  in  national  emergency  pla  n- 
ning  in  the  event  of  major  and  minor 
Y2K  disruptions. 

State  and  local  governments  vary 
widely  in  their  Y2K  preparations. 
Several  states  are  not  prepared  to 
deliver  critical  services  such  as 
benefit  payments.  Of  greatest  co  n- 
cern  to  the  Committee  is  the  ability  of 
local  communities  to  provide  911 
and  emergency  services. 


The  federal  government  also  varies 
widely  in  its  Y2K  preparations.  The 
Social  Security  Administration 
started  early  and  is  prepared,  while 
other  agencies,  like  the  Department 
of  Defense,  are  lagging.  To  its 
credit,  the  federal  government  pu  b- 
licly  displays  its  Y2K  status  through 
quarterly  and  monthly  reports  to  the 
Office  of  Management  and  Budget. 

GENERAL  BUSINESS 

In  general,  large  companies  have 
dealt  well  with  the  Y2K  problem, 
due  to  greater  resources.  Very 
small  businesses  may  survive 
using  manual  processes  until  Y2K 
problems  are  remediated.  Ho  w- 
ever,  many  small-  and  m  edium- 
sized  businesses  are  extremely 
unprepared  for  Y2K  disruptions. 
One  survey  shows  that  more  than 
40%  of  14  million  small  bus  i- 
nesses  do  not  plan  to  take  any  a  c- 
tion. 

The  heavily  regulated  insurance,  i  n- 
vestment  services,  and  banking  i  n- 
dustries  are  furthest  ahead  in  their 
efforts:  health  care,  oil,  education, 
agriculture,  farming,  food  processing, 
and  the  construction  industries  are 
lagging  behind.  The  cost  to  regain 
lost  operational  capability  for  any 
mission  critical  failure  will  range  from 
$20,000  to  $3.5  million,  with  an  a  v- 
erage  of  3  to  15  days  necessary  to 
regain  lost  fun  ctions. 

LITIGATION 

The  prospect  of  litigation  arising  from 
Y2K-related  failures  has  shadowed 
the  Committee’s  work  from  the  very 
beginning.  Some  estimates  project 
litigation  cost  in  excess  of  $1  tri  I- 
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lion.  The  Committee  plans  to  hold 
hearings  and  work  closely  with  the 
Judiciary  and  Commerce  Commi  t- 
tees  to  make  legislative  proposals  in 
this  area. 

INTERNATIONAL 

Several  U.S.  trading  partners  are 
severely  behind  in  their  Y2K  r  e- 
mediation  efforts.  For  example, 
the  Gartner  Group  estimates  that 
Venezuela  and  Saudi  Arabia  (two 
of  the  largest  U.S.  oil  importers) 
are  12  to  18  months  behind  the 
U.S.  in  their  Y2K  remediation  e  f- 
forts. 

The  Committee  is  greatly  concerned 
about  the  international  Y2K  picture. 
The  U.S.  is  dependent  on  a  healthy 
global  economy.  It  is  in  the  interest 
of  the  U.S.  to  encourage  Y2K  rem  e- 
diation  worldwide. 

***** 

The  challenges  posed  by  the  Y2K 
problem  are  numerous  and  daunting. 
The  Special  Committee  conducted 


extensive  research  and  held  nume  r- 
ous  hearings  in  1998,  but  still  cannot 
conclusively  determine  how  exte  n- 
sive  the  Y2K  disruptions  will  be.  The 
Committee  has  no  data  to  suggest 
that  the  United  States  will  experience 
nation-wide  social  or  economic  co  I- 
lapse,  but  the  Committee  believes 
that  some  disruptions  will  occur,  and 
that  in  some  cases  Y2K  disruptions 
may  be  significant.  The  international 
situation  may  be  even  more  tumult  u- 
ous. 

There  are  reasonable  steps  individ  u- 
als  may  take  to  prepare  for  the  Year 
2000.  Consumers  are  urged  to  keep 
copies  of  financial  statements  and 
ask  local  banks  what  efforts  are  b  e- 
ing  made  toward  Y2K  compliance. 
Individuals  should  research  comp  a- 
nies'  compliance  levels  before  ma  k- 
ing  investment  decisions.  The  Y2K 
problem  has  been  likened  to  a  winter 
storm,  with  the  implication  that  sim  i- 
lar  preparation  is  appropriate. 
Americans  should  prepare  for  Y2K 
based  on  facts  and  reasonable  pr  e- 
dictions  about  the  problem's  effects 
on  vital  services. 
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INTRODUCTION 


The  Year  2000  (Y2K)  technology 
problem  started  as  an  innocuous 
short-term  solution  to  the  oppre  s- 
sively  high  cost  of  computer  memory 
in  the  1950s  and  1960s.  Program¬ 
mers  expected  that  the  problems 
created  by  the  limited,  two-digit 
method  of  date  storage 
would  solve  themselves 
as  companies,  govern¬ 
ments  and  other 
computer-owners 
updated  their  hardware 
and  software.  Fifty  years 
after  the  introduction  of 
the  computer,  the  Y2K 
problem  has  the  potential 
to  develop  into  a  worldwide  crisis. 
Two  common  human  failings  co  n- 
tributed  to  the  crisis — the  tendency 
to  follow  a  path  of  least  resistance 
and  the  reluctance  to  champion  diff  i- 
cult  and  complex 
issues.  The  Y2K 
problem  does  not  have 
to  be  a  story  of  failure, 
however.  If  addressed 
successfully,  Y2K  may 
encourage  political  and 
corporate  leaders  to 
better  understand  and 
protect  the  critical 
infrastructure. 


Fifty  years  after 

THE  BIRTH  OF  THE 
COMPUTER,  Y2K 
HAS  DEVELOPED 
INTO  A  WORLDWIDE 
COLLECTIVE  CRISIS. 


that  a  new  system  could  accept  four¬ 
digit  years  and  still  exchange  info  r- 
mation  with  two-digit  based  systems, 
the  extra  effort  required  slowed  the 
changeover  process.  Additionally, 
the  equipment  that  earlier  computer 
experts  predicted  would  fall  into  o  b- 

_  solescence  long  before 

2000  survived  through 
layers  of  programming 
updates  and 

modifications.  Instead  of 
solving  itself,  the  Y2K 
problem  self-propagated 
around  the  globe. 


As  memory  costs  fell 
dramatically,  software 
writers  and  hardware  manufacturers 
did  not  immediately  expand  date 
variables.  Newer  versions  of  har  d- 
ware  and  software  needed  to 
interface  with  older  versions.  While 
some  programs  were  modified  so 


Y2K,  AS  THE  FIRST 
CHALLENGE  OF  THE 
INFORMATION  AGE,  MUST 
LEAVE  A  LEGACY  OF 
INCREASED  AWARENESS 
AND  APPRECIATION  OF 
INFORMATION 
TECHNOLOGY’S  ROLE  IN 
SOCIAL  AND  ECONOMIC 
ADVANCEMENT. 


Just  as  programmers 
found  it  easy  to  follow  the  tradition  of 
using  a  two-digit  date  field,  ma  n- 
agement  and  leadership  have  found 
it  easy  to  defer  addressing  the  Y2K 
problem.  Y2K  competes  poorly 
against  issues  such  as 
trade  agreements, 
military  operations, 
market  share  and 
product  development. 
It  lacks  familiarity,  and 
in  a  results-driven 
economy,  Y2K  reme¬ 
diation  costs  are 
difficult  to  justify  to 
taxpayers  or 

shareholders. 
Additionally,  few 
wished  to  be 
associated  with  the  potential  repe  r- 
cussions  of  a  failed  Y2K  re¬ 
mediation  attempt. 


At  the  heart  of  the  problem  lies  a  s  e- 
rious  disconnect  between  those 
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who  use  technology  and  those  who 
create  it.  On  a  worldwide  scale, 
leaders  of  corporations  and  countries 
are  struggling  to  understand  the  Y2K 
problem.  In  the  process,  they  are 
receiving  a  crash  course  in  the  fra  g- 
ile  mechanics  of  information 
technology. 

The  Committee  feels  strongly  that 
Y2K,  as  the  first  widespread  cha  I- 
lenge  of  the  information  age,  must 
leave  a  legacy  of  increased  awar  e- 
ness  and  appreciation  of  information 
technology’s  role  in  social  and  ec  o- 
nomic  advancement. 


UNDERSTANDING  THE 
PROBLEM 


The  goal  of  this  section  is  to  provide 
background  on  the  Y2K  problem  and 
answer  common  Y2K  questions. 

What  is  the  Year  2000  computer 
technology  problem? 

The  phrases  the  “Year  2000  Co  m- 
puter  Technology  Problem,”  the 
“Millennium  Bug,"  the  “Century  Date 
Change,”  or  simply,  “Y2K” 1  all  refer 
to  the  same  problem — a  defect  that 
exists  in  millions  of  computer  pro¬ 
grams  worldwide  that  causes 
erroneous  handling  of  date  (i.e.,  day, 
month  and  year)  information  if  not 
corrected.  The  effect  of  the  Y2K  flaw 
on  computer  systems  is  not  easily 
predictable.  It  may  bring  a  computer 
to  a  crashing  halt.  It  may  cause  the 
computer  to  generate  obviously  i  n- 
correct  outputs.  Or  alternatively,  it 
could  allow  the  computer  to  produce 
invalid  data  that  will  not  be  detected 
until  much  later,  forcing  users  to  co  r- 


rect  a  range  of  accumulated  errors 
while  searching  for  the  source  of  the 
problem. 

Why  is  two  digit  notation  defe  c- 
tive? 

To  save  memory  in  the  early  days  of 
computing,  programmers  repr  e- 
sented  four-digit  years  with  only  two 
digits.  For  instance,  1968  or  1974 
would  be  stored  and  processed  as 
68  and  74,  respectively.  The  nu  m- 
ber  19,  indicating  years  in  the  1900s, 
was  implied,  much  as  personal 
checks  once  had  the  number  19 
preprinted  on  the  dateline. 

This  worked  smoothly  until  users 
started  to  input  dates  occurring  after 
December  31,  1999.  Computers  ran 
into  problems  when  required  to  ca  I- 
culate  a  number  based  on  the 
difference  in  two  dates,  such  as  the 
interest  due  on  a  mortgage  loan. 
Computers  continued  to  assume  that 
the  prefix  19  was  implied,  so  dates 
such  as  00  or  01  were  treated  as 
1900  or  1901.  Consequently,  com¬ 
puters  could  not  correctly  calculate 
the  difference  between  a  year  in  the 
20th  century  and  a  year  in  the  21 st 
century. 

For  example,  we  know  that  the  time 
between  July  1,  1998,  and  July  1, 
2005  is  exactly  7  years.  However,  a 
computer  with  a  Y2K  problem  could 
calculate  an  answer  of  either  93 
years  or  -7  years,  depending  on  the 
specific  program.  Calculations  that 
used  either  of  these  results  would  be 
in  error  and  may  themselves  cause 
subsequent  problems. 

Another  Y2K  problem  occurs  in  the 
storage  of  information.  Many  kinds 


Senate  Special  Committee  on  the  Year  2000  Technology  Problem 


8 


Investigating  The  Impact  of  the  Year  2000  Problem 


of  data  are  organized  and  processed 
by  date,  such  as  driver’s  license  re  c- 
ords  and  credit  card  accounts. 
Computers  have  had  problems  pro  c- 
essing  credit  cards  that  have 
expiration  dates  after  December 
1999.  Due  to  two-digit  dating,  co  m- 
puters  have  thought  that  cards 
expiring  in  2000  or  later  had  expired 
almost  a  century  ago. 

What  is  the  scope  of  Y2K  pro  b- 
lems? 

The  Y2K  problem  affects  two  general 
classes  of  equipment.  The  first  class 
comprises  business  systems  or 
mainframe  systems.  These  compu  t- 
ers  perform  a  variety  of  data- 
intensive  calculations — balancing 
accounts,  making  payments,  tracking 
inventory,  ordering  goods,  managing 
personnel,  scheduling  resources, 
etc.  The  second  class  of  equipment 
has  several  common  names,  inclu  d- 
ing  embedded  chips,  embedded 
processors  and  embedded  control 
systems.  Many  aspects  of  modern 
society  rely  on  microchip-enhanced 
technology  to  control  or  augment 
operations.  Examples  are  ubiqu  i- 
tous.  Automatic  teller  machines,  toll 
collection  systems,  security  and  fire 
detection  systems,  oil  and  gas  pip  e- 
lines,  consumer  electronics, 
transportation  vehicles,  manufactu  r- 
ing  process  controllers,  military 
systems,  medical  devices  and  tel  e- 
communications  equipment  all 
depend  on  embedded  chip- 
technology. 

Y2K  related  failures  in  business 
systems  will  generally  cause  an  e  n- 
terprise  to  lose  partial  or  complete 
control  of  critical  processes.  In  the 


private  sector,  loss  of  business  sy  s- 
tems  means  that  a  company  may 
have  difficulty  managing  its  finances, 
making  or  receiving  payments  and 
tracking  inventory,  orders,  production 
or  deliveries.  In  the  public  sector, 
government  organizations  may  be 
severely  hindered  in  performing  b  a- 
sic  functions  such  as  paying 
retirement  and  medical  benefits, 
maintaining  military  readiness,  re¬ 
sponding  to  state  and  local 
emergencies,  controlling  air  traffic, 
collecting  taxes  and  customs  and 
coordinating  law  enforcement  e  fforts. 

Y2K  problems  in  embedded  systems 
have  the  potential  to  affect  public 
health  and  safety.  Problems  that 
need  to  be  fixed  have  already  been 
detected  in  medical  treatment  d  e- 
vices,  water  and  electricity 
distribution  and  control  systems,  ai  r- 
port  runway  lighting  and  building 
security  systems. 2  Other  suspect 
areas  are  pipeline  control  systems 
and  chemical  and  pharmaceutical 
manufacturing  processes. 

How  was  the  Y2K  mistake  made? 

Several  factors  explain  the  creation 
of  the  Y2K  problem.  In  the  early 
days  of  computers,  computer  me  m- 
ory  was  very  expensive.  In  the  IBM 
7094  of  the  early  1960s,  core  me  m- 
ory  cost  around  $1  per  byte. 
Today’s  semiconductor  memory 
costs  around  $1  per  million  bytes. 
Thus,  there  was  a  very  strong  ec  o- 
nomic  incentive  to  minimize  the 
amount  of  memory  needed  to  store  a 
program  and  its  data  in  the  co  m- 
puter’s  memory. 
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Additionally,  early  computer  pr  o- 
gramming  was  highly  time- 
consuming.  Programs  and  data 
were  recorded  and  entered  into 
computers  via  80  column  punch 
cards.  Each  of  the  80  columns  could 
contain  exactly  one  byte  of  inform  a- 
tion,  which  corresponded  to  one  of 
the  four  digits  needed  to  represent  a 
year.  The  cumbersome  nature  of 
punched  cards  encouraged  using  as 
few  of  them  as  poss  ible. 

Although  programmers  and  mana  g- 
ers  knew  they  had  built  software  with 
latent  defects  in  it,  no  one  thought 
that  software  written  in  the  60s  and 
70s  would  survive  to  the  Year  2000. 
Compounding  the  problem,  newer 
software  had  to  interface  and  share 
data  with  the  older  software.  Al¬ 
though  the  new  software  could  have 
handled  dates  internally  in  four  digit 
formats  and  swapped  data  in  two 
digit  formats  with  the  older  software, 
to  do  so  added  complexity  and 
hence  added  cost  to  new  software. 
The  net  result  was  that  the  two-digit 
standard  for  representing  years  co  n- 
tinued  much  longer  than  anyone 
would  have  guessed. 

When  will  Y2K  problems  start? 

Y2K  problems  have  already  surfaced 
in  many  places.  Cap  Gemini,  a 
technology  consulting  firm,  reported 
that  as  of  December  1997,  7%  of  a 
group  of  128  large  U.S.  companies 
had  experienced  Y2K  related  pro  b- 
lems.3  By  March  1998,  that  number 
leaped  to  37%.  The  Gartner  Group, 
an  information  technology  research 
company,  has  developed  a  model  to 
predict  the  rate  of  occurrence  of  Y2K 
problems.  This  prediction  is  based 


on  data  collected  quarterly  from  over 
1 5,000  firms  and  government  o  r- 
ganizations  in  87  countries.  Gartner 
estimates  a  rapid  increase  in  pro  b- 
lems  in  1999  with  a  peak  sometime 
after  January  1 ,  2000.  Problem  o  c- 
currences  will  drop  off  after  2000,  but 
will  still  occur  for  another  3  to  5  years 
at  a  lower  level.  Finally,  the  Inform  a- 
tion  Technology  Association  of 
America  has  reported  that  about  half 
the  major  corporations  in  America 
have  already  experienced  some  form 
of  Y2K  disruption  as  of  March  25, 
1998. 4 

How  can  we  fix  Y2K  and  how  long 
will  it  take? 

It  is  beyond  the  scope  of  this  report 
to  cover  the  technical  nuances  of 
these  various  solutions.  However, 
various  techniques  are  briefly  d  e- 
scribed  in  Appendix  III. 

How  much  are  Y2K  fixes  going  to 
cost? 

There  is  no  generally  agreed  upon 
answer  to  this  question.  The  Gartner 
Group’s  estimate  of  $600  billion 
worldwide  is  a  frequently  cited  nu  m- 
ber.  Another  number  from  a 
reputable  source  is  that  of  Capers 
Jones,  Software  Productivity  R  e- 
search,  Inc.  of  Burlington,  MA. 
Jones’  worldwide  estimate  is  over 
$1.6  trillion. 5  Part  of  the  difference  is 
that  Jones’  estimate  includes  over 
$300  billion  for  litigation  and  da  in- 
ages  but  Gartner’s  does  not.  A 
sense  of  the  scale  of  the  cost  can  be 
gained  from  looking  at  the  Y2K  costs 
of  six  multinational  financial  services 
institutions;  Citicorp,  General  Motors, 
Bank  America,  Credit  Suisse 
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Group,  Chase  Manhattan  and  J.P. 
Morgan.  These  six  institutions  have 
collectively  estimated  their  Y2K  costs 
to  be  over  $2.4  billion.  Additionally, 
the  estimated  cost  of  Y2K  repairs  is 
increasing,  as  shown  in  figure  2. 

Figure  2.  Y2K  Repair  Est  imates6 


Company 

Past  Est. 
(millions) 

New  Est. 
(millions) 

Aetna 

$139 

$195 

ATT 

$300 

$900 

Bankers  Trust 

$180-$230 

$220-$260 

Cendant 

$25 

$53 

Chase  Manhatt. 

$300 

$363 

General  Motors 

$400-$500 

$890 

McDonald’s 

$8 

$30 

Merrill  Lynch 

$375 

$560 

Sears 

$63 

$143 

Xerox 

$116 

$135 

Can’t  we  develop  an  easy  Y2K  fix? 

Popular  sentiment  suggests  that  a 
technological  quick  fix  will  appear 
just  in  time  to  kill  the  millennium  bug. 
So  far,  “quick  fix”  claims  have  proved 
to  be  claims  for  a  particular  product 
that  may  show  promise  in  one  pa  r- 
ticular  application,  for  example, 
finding  where  the  actual  dates  and 
date  processing  routines  are  hidden 
in  a  program. 

Software  programs  and  computer 
hardware  vary  too  greatly  to  be  fixed 
by  one  solution.  Currently,  there  are 
over  500  programming  languages  in 
use.  A  universal  or  broadly  applic  a- 
ble  Y2K  solution  would  have  to  be 
compatible  with  many  or  most  of 
these  languages.  Additionally,  fin  d- 
ing  all  the  dates  and  date  processing 
in  an  estimated  36,000,000  pr  o- 


grams7  is  an  enormous  task  difficult 
to  automate. 

The  embedded  processors  pose  a  n- 
other  problem.  Although  the 
percentage  of  embedded  chips  with 
a  Y2K  problem  is  estimated  to  be 
relatively  small,  potentially  millions  of 
chips  exist  that  may  have  to  be  r  e- 
placed.  Unfortunately,  most  of  them 
are  not  readily  accessible  or  easily 
modified. 

Where  can  I  learn  more  about  the 
Y2K  problem? 

Many  solid  references  can  be  found 
in  the  endnotes  of  this  section  and 
elsewhere  in  this  report.  An  eno  r- 
mous  amount  of  Y2K  information 
resides  on  the  Internet.  However, 
legitimate  information  *  is  buried 
among  overstated  rumors  and  half- 
truths.  As  with  most  other  inform  a- 
tion  derived  from  Internet  sources, 
Y2K  information  must  be  verified  for 
accuracy. 

Additional  information  can  be  ob¬ 
tained  through  the  Committee’s 
website  at  www.senate.gov/~y2k  and 
the  President’s  Council  on  Year 
2000  Conversion’s  website  at 
www.y2k.gov. 


CRITICAL 

INFRASTRUCTURES 


Critical  infrastructures  can  include 
both  computerized  services  and 
physical  services  essential  to  min  i- 
mum  functioning  of  economy  and 
government.  More  than  abstract 
systems,  critical  infrastructures  e  n- 
able  the  average  person  to  use  an 
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ATM,  make  a  phone  call  and  fly  on 
an  airline.  In  the  past,  many  of  these 
key  infrastructures  or  sectors  were 
separate.  However,  advances  in  i  n- 
formation  technology  have  caused 
many  of  these  systems  to  be  inte  r- 
connected  and  linked  through 
networks.  The  Committee  has  a  p- 
proached  the  critical  infrastructures 
by  examining  the  Y2K  work  occu  r- 
ring  both  vertically  within  specific 
sectors  and  horizontally  across  dif¬ 
ferent  interrelated  sectors,  such  as 
banking  and  telecommun  ications. 

Recognizing  that  the  Y2K  problem 
could  have  serious  implications  on 
the  smooth  functioning  of  our  d  e- 
fense  and  economy,  Senator 
Moynihan  wrote  President  Clinton  in 
July  of  1 996  and  suggested  a  special 
Y2K  commission.  While  Senator 
Moynihan’s  suggestion  was  not 
taken,  Executive  Order 
13010  created  the 
President's  Commission 
on  Critical  Infrastructure 
Protection.  The 

Commission  was  not 
tasked  to  study  Y2K,  but 
it  recognized  the  poten¬ 
tial  for  the  Y2K  problem  to  cause 
long-term  problems  in  the  infra¬ 
structures.  Due  to  late  starts,  many 
organizations  have  contracted  out 
work  on  sensitive  systems.  In  some 
cases,  organizations  are  sending 
code  overseas  to  foreign  firms.  The 
correction  of  code  overseas  could 
lead  to  increased  incidents  of  corp  o- 
rate  espionage  and  intentional  cyber 
disruptions.  The  broad  scope  of  Y2K 
corrections  could  allow  an  adversary 
to  build  an  exceptional  understan  d- 
ing  of  sensitive  systems  thus 
enabling  it  to  “design  a  subtle  or 


comprehensive  attack”  against  crit  i- 
cal  systems.8 

It  is  absolutely  vital  that  the  owners, 
operators  and  regulators  of  the  n  a- 
tion’s  critical  systems  continue  to  be 
aware  that  Y2K  may  provide  an  o  p- 
portunity  for  those  with  malicious 
intent.  Sandia  National  Laboratories 
warned  the  Committee  that: 

“Thinking  that  we  will  be  so  preocc  u- 
pied  with  Y2K  that  we  would  not 
notice  deliberate  malicious  intent, 
terrorists,  hackers  and  other  crim  i- 
nals  might  see  Y2K  as  a  prime 
opportunity  to  attack  pieces  of  our 
infrastructure.  Or  they  might  use 
Y2K-induced  infrastructure  failures 
as  cover  for  theft,  arson,  bombings, 
etc.  We  must  be  watchful  of  such 
groups  in  the  months  leading  up  to 
Y2K  and  we  must  be  especially 
careful  when 

monitoring  the  crisis  as 
it  occurs  to  discern 
deliberate  intent.” 9 

Current  national 

security  and  erne  r- 
gency  preparedness 
policies  are  not  designed  for  the 
challenges  of  the  information  age. 
The  U.S.  needs  a  system  or  process 
whereby  the  government  can  coord  i- 
nate  responses  with  the  privately 
owned  and  operated  critical  infr  a- 
structures.  We  must  build  the  broad 
based  contingency  plans  necessary 
to  ensure  that  the  national  security 
and  emergency  preparedness  po  s- 
ture  of  the  U.S.  is  not  compromised 
by  Y2K.  The  U.S.  must  remain 
ready  to  mitigate  the  (economic, 
emergency  or  security)  effects  that 
could  be  caused  by  Y2K. 


The  question  is  not 

WILL  THERE  BE 
DISRUPTIONS,  BUT  HOW 
SEVERE  THE 
DISRUPTIONS  WILL  BE. 

-Senator  Dodd 
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Y2K  is  an  opportunity  to  educate 
ourselves  first  hand  about  the  nature 
of  21st  century  threats.  Technology 
has  provided  the  U.S.  with  many  a  d- 
vantages,  but  it  also  creates  many 
new  vulnerabilities.  Recognizing 
shifts  in  the  technological  topography 
of  the  nation  requires  vision.  Re¬ 
verting  to  a  world  without  microchips 
or  technology-dependent  systems  is 
not  only  undesirable,  but  also  impo  s- 
sible.  Instead,  we,  as  a  nation  and 
as  individuals,  need  to  consider 
carefully  our  reliance  on  information 
technology  and  the  consequences  of 
interconnectivity,  and  work  to  protect 
that  which  we  have  so  long  taken  for 
granted. 


FORMATION  OF  THE 
SPECIAL  COMMITTEE 


Senator  Robert  Bennett  first  ident  i- 
fied  the  Year  2000  as  an  issue  for 
the  legislative  agenda  in  1996  as  the 
Senate  organized  for  the  105  th  Con¬ 
gress.  He  shared  his  concerns  with 
Senator  Alfonse  D’Amato,  Chairman 
of  the  Senate  Banking  Committee, 
who  urged  Senator  Bennett  to  take 
up  the  issue  in  his  new  role  as 
Chairman  of  the  Subcommittee  on 
Financial  Services  and  Techno  logy. 

The  Subcommittee  naturally  focused 
its  first  efforts  on  the  regulators’  e  f- 
forts  to  ensure  Y2K  compliance.  In 
February  1997  and  again  in  April 
1997,  Senators  D’Amato  and 
Bennett  requested  information  on 
Y2K  preparations  from  the  following 
financial  regulatory  agencies: 


•  The  Federal  Reserve  Board 
(FRB) 

•  The  Federal  Deposit  Insurance 
Corporation  (FDIC) 

•  The  Office  of  Thrift  Supervision 
(OTS) 

•  The  National  Credit  Union  Ad¬ 
ministration  (NCUA) 

•  The  Office  of  the  Comptroller  of 
the  Currency  (OCC) 

•  The  Securities  and  Exchange 
Commission  (SEC) 

Shortly  after  the  Committee  inquiry, 
the  Federal  Financial  Institutions  E  x- 
amination  Council  (FFIEC),  an  inter 
agency  body  made  up  of  FRB,  FDIC, 
OTS,  NCUA  and  OCC,  issued 
guidelines  for  the  financial  instit  u- 
tions  and  federal  examiners  to  focus 
on  issues  they  must  address  to  avoid 
major  service  disruptions  due  to 
Y2K.10 

Individual  agency  responses  r  e- 
vealed  varying  degrees  of  readiness. 
The  SEC's  response  detailed  exte  n- 
sive  plans  for  remediation  and 
testing,  while  other  agencies  demo  n- 
strated  little  more  than  a  general 
awareness  and  initial  response  to 
the  problem.  Many  of  the  regulatory 
agencies  deferred  to  statements 
published  by  FFIEC  without  provi  d- 
ing  any  substantive  information 
about  their  own  progress.  These  r  e- 
sults  prompted  Senator  Bennett  to 
conduct  the  first  hearing  on  financial 
services  and  the  Year  2000  on  July 
10,  1997. 
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At  the  end  of  the  first  hearing, 
Senator  Christopher  Dodd  quickly 
recognized  the  importance  of  the 
Y2K  issue  and  voiced  his  support  for 
additional  hearings  on  Y2K.  The 
Subcommittee  held  another  eight 
hearings  to  investigate  the  scope 
and  severity  of  the  Y2K  problem  and 
to  prompt  action  in  the  financial 
community. 

On  November  10,  1997,  Senator 
Bennett  introduced  the  Computer 
Remediation  and  Shareholder  Pro¬ 
tection  Act  of  1997  (CRASH 
Protection  Act),  which  required  the 
Securities  and  Exchange  Commi  s- 
sion  to  increase  its  disclosure 
regulations  relative  to  Y2K  read  i- 
ness.  With  the  threat  of  the  CRASH 
Protection  Act  looming,  the  SEC  r  e- 
doubled  its  efforts  to  raise 
awareness  of  Y2K  implications. 

Also  in  November  1997,  Senator 
Bennett  wrote  President  Clinton  to 
express  concern  over  a  lack  of  n  a- 
tional  leadership  in  the  Y2K  arena. 
The  Senator  suggested  the  appoin  t- 
ment  of  a  Y2K  “czar”  to  oversee  the 
Y2K  compliance  of  the  federal  go  v- 
ernment  and  initiate  a  public-private 
Y2K  action.  Three  months  later, 
President  Clinton  issued  Executive 
Order  1 3073,  creating  the  Pres  i- 
dent’s  Council  on  Year  2000 
Conversion.  Subsequently,  John 
Koskinen  was  tapped  to  chair  the 
new  council. 

During  these  events,  the  Subco  m- 
mittee  struggled  to  reach  industries 
outside  of  banking.  SEC  disclosures 
provided  a  tool,  albeit  blunt,  to  raise 
Y2K  awareness  and  planning  within 
public  companies.  Despite  staff 


bulletins  emphasizing  the  application 
of  disclosure  law  to  the  Y2K  issue, 
the  level  of  information  disclosed  in 
March  1998  was  disappointingly  low. 
Indeed,  some  companies  overlooked 
Y2K  entirely  under  the  premise  that 
Y2K  did  not  present  a  material  threat 
to  their  businesses.  Meanwhile,  off- 
the-record  discussions  with  Su  b- 
committee  staff  suggested  that  many 
corporations  preferred  to  incur  SEC 
fines  than  a  drop  in  their  stock 
prices.  The  Subcommittee  invited 
the  SEC  to  a  June  1998  hearing, 
which  led  to  additional  guidance  in 
the  form  of  an  interpretive  release  on 
Y2K  disclosure.  However,  the  point 
was  made  that  the  Subcommittee  on 
Financial  Services  and  Technology 
simply  did  not  provide  the  scope 
necessary  to  adequately  address  the 
breadth  and  depth  of  the  Y2K  pro  b- 
lem. 

Voicing  this  concern,  Senators 
Bennett  and  Dodd  met  with  the  Se  n- 
ate  leadership.  Senate  Majority 
Leader  Trent  Lott  recognized  the  i  m- 
portance  of  Senate  leadership  in  the 
Y2K  arena  and  with  the  assistance 
of  Minority  Leader  Tom  Daschle, 
cleared  the  way  for  the  creation  of 
the  Special  Committee  on  the  Year 
2000  Technology  Problem. 

On  April  2,  1998,  the  U.S.  Senate 
unanimously  voted  to  establish  a 
new  committee  to  address  the  Y2K 
technology  problem.  The  Special 
Committee  on  the  Year  2000  Tec  h- 
nology  Problem  was  authorized 
through  February  29,  2000.  The 
Majority  Leader  named  Senator 
Bennett  to  serve  as  its  Chairman. 
Committee  membership  included: 
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•  Vice-Chairman  Senator 
Christopher  Dodd 
(D-Connecticut) 

•  Senator  Jon  Kyi  (R-Arizona) 

•  Senator  Susan  Collins  (R  -Maine) 

•  Senator  Gordon  Smith 
(R-Oregon) 

•  Senator  Daniel  Patrick  Moynihan 
(D-New  York) 

•  Senator  Jeff  Bingaman  (D  -New 
Mexico) 

•  Senator  Ted  Stevens  (R-Alaska) 
ex-officio 


•  Senator  Robert  Byrd  (D-West 
Virginia)  ex-officio 

Because  the  Committee  does  not 
have  legislative  authority,  each  of  the 
members  was  carefully  selected 
based  on  membership  on  other 
committees,  such  as  Judiciary, 
Armed  Services  and  Government 
Affairs. 

According  to  the  legislation  that  cr  e- 
ated  it,  the  Senate  Special 
Committee  on  the  Year  2000  Tec  h- 
nology  Problem  will  exist  until 
February  29,  2000,  after  which  it  will 
permanently  disband. 


1  Y2K  is  an  acronym  that  stands  for  the  Year  2000.  The  letter  K  is  scientific  shorthand  for  1000. 

2  “Year  2000  Recession?,”  Edward  Yardeni,  Version  9.1,  November  2,  1998,  chapter  3, 
http://www.vardeni.com/v2kbook.html . 

3  “Year  2000  Survival  Guide,”  Edmund  X.  DeJesus,  BYTE  Magazine,  July  1998,  p.  57. 

4  ITAA  Press  Release,  March  25, 1998,  http://www.itaa.org/v2kpr.htm . 

5  “The  Global  Economic  Impact  of  the  Year  2000  Software  Problem,”  Capers  Jones,  version  5.2,  January 
23, 1997,  Software  Productivity  Research,  Burlington,  MA,  pp.  57-58. 

6  Business  Week,  December  14, 1998,  p.39. 

7  “The  Global  Economic  Impact  of  the  Year  2000  Software  Problem,”  Capers  Jones,  version  5.2,  January 
23, 1997,  Software  Productivity  Research,  Burlington,  MA,  p.  20. 

8  Critical  Foundations:  Protecting  America’s  Critical  Infrastructures  (PCCIP  report,  October  1997). 

9  Testimony  of  Sandia  National  Laboratories  before  the  Special  Committee  on  the  Year  2000  Technology 
Problem,  United  States  Senate,  July  31, 1998. 

10  Richard  M.  Nunno,  “The  Year  2000  Computer  Problem:  Activity  in  the  105th  Congress,”  Congressional 
Research  Service,  October  1 , 1 998. 
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UTILITIES 


The  Committee  has  taken  a  broad- 
based  approach  to  utilities — aggre¬ 
gating  electrical  power,  gas  and  oil, 
and  water  (drinking  and  wastewater) 
in  this  sector.  Telecommunica¬ 
tions — is  discussed  separately  in 
another  section  of  this  report. 


ELECTRIC  UTILITIES 


One  of  the  most  often  asked  ques¬ 
tion  concerning  Y2K  is,  “will  the 
lights  stay  on?”  In  general,  the  an¬ 
swer  is  yes.  However,  progress  in 
assessing,  remediating,  and 
testing  is  insufficient  to 
answer  this  question 

absolutely.  As  with  other 
sectors,  some  general 

conclusions  can  be  drawn. 

First,  the  large  corporations, 
or  bulk  power  producers, 
are  spending  vast  resources 
to  get  the  Y2K  problem  under  con¬ 
trol.  However,  each  of  the  3200 
electric  utilities  is  at  a  different  stage 
of  remediation,  and  many  may  expe¬ 
rience  problems.  All  of  the  evidence 
seems  to  indicate  that  there  may  be 
isolated  and  diverse  electrical  out¬ 
ages  across  the  country.  The 
questions  now  are:  Where  will  they 
occur,  how  long  will  they  last,  and 
will  they  be  significant  enough  to  af¬ 
fect  the  overall  grid? 

The  Committee  made  electric  utilities 
its  top  priority  because  of  its  critical 
importance  to  everything  else— with¬ 
out  electric  power  little  else  will  work. 
As  a  result,  the  status  of  electric 


power  is  the  number  one  concern  for 
all  other  sectors. 

Overview 

There  are  about  3,200  independent 
electric  utilities  in  the  United  States 
including  about 

•  250  investor-owned  or  private 
utilities, 

•  10  government-owned  utilities, 

•  2,000  other  publicly  owned  utili¬ 
ties,  and 

•  900  cooperatives. 

Nearly  80%  of  the  nation’s 
power  generation  comes 
from  the  250  investor- 
owned  public  utilities.  The 
federal  government 

generates  another  10%  of 
the  nation’s  power, 
primarily  through  large 
facilities  such  as  the  Tennessee 
Valley  Authority  and  the  Bonneville 
Power  Authority.  There  are  another 
2,000  non-utilities,  or  privately 
owned  entities,  that  generate  power 
for  their  own  use  and/or  for  sale  to 
utilities  and  others. 

Electric  power  is  generated  from  the 
following  sources: 

•  51%  by  coal 

•  20%  by  nuclear  energy 

•  1 5%  by  gas, 

•  10%  by  hydro,  and 

•  4%  by  other  sources. 

The  approximately  900  cooperatives 


Electrical 

POWER  IS  KEY  TO 
EVERY  OTHER 

sector:  The 

LIGHTS  MUST 
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generally  have  limited  power- 
generation  capacity  and  focus  pri¬ 
marily  on  distribution  systems. 

The  electric  power  industry  is  com¬ 
plex  and  highly  automated.  It  is 
made  up  of  an  interconnected  net¬ 
work  of  generation  plants  (nuclear, 
fossil  fuel,  gas,  hydro,  etc.),  trans¬ 
mission  lines  (commonly  referred  to 
as  the  “grid”),  and  distribution  facili¬ 
ties.  There  are  three  independent 
interconnections  or  grids  that  provide 


out  in  Maine,  affecting  power  in 
Florida. 

The  basic  structure  of  an  electric 
power  transmission  and  distribution 
system  consists  of  a  generating 
system,  a  transmission  system,  a 
sub-transmission  system,  a  distribu¬ 
tion  system,  and  a  control  center. 
Power  plant  generation  systems  may 
include  steam  turbines,  diesel  en¬ 
gines,  or  hydraulic  turbines 
connected  to  alternators  that  gener- 


electricity  to  every 
household  and  company 
in  North  America  (See  fig¬ 
ure  1.) 

In  its  simplest  form,  each 
of  these  grids  operates 
as  a  single  machine, 
constantly  making 

adjustments  to  balance 
the  amount  of  power 
being  generated  with  the 
amount  being  used. 
These  adjustments  are 
critical  because  electric 
power  cannot  be  stored. 


Too  much  power  could  Figure  1:  North  American  “Grids” 

literally  melt  transmission 

and  distribution  lines;  too  little  power  ate  AC  electricity.  This  configuration 
could  result  in  brown  outs.  is  illustrated  in  figure  2. 


It  takes  a  high  degree  of  automation 
to  operate  the  grid.  On  one  hand,  it 
is  this  high  degree  of  interconnect¬ 
edness  that  gives  the  system  its 
unprecedented  reliability  and  effi¬ 
ciency.  On  the  other  hand,  the 
interconnectedness  makes  the  grid 
fragile  and  susceptible  to  Y2K  dis¬ 
ruptions.  An  outage  in  one  part  of 
the  grid  can  cascade  causing  ripple 
effects  on  other  parts  of  the  grid.  For 
example,  a  generation  plant  could  go 


In  most  respects,  the  electric  indus¬ 
try  faces  the  same  Y2K  challenges 
as  every  other  industry.  Y2K 
anomalies  could  lead  to  the  malfunc¬ 
tion  of  software  programs  on 
mainframe  computers,  servers,  PCs, 
and  communications  systems.  Cor¬ 
rupted  data  could  be  passed  from 
one  application  to  another  causing 
erroneous  results  or  shutdowns.  This 
means  computer  programs  used  for 
accounting,  administration,  billing, 
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Generation 

2,000-24,000  Volts 


Transmission 


69,000-765,000  Volts 


Distribution 

23,000  Volts 


Load 

4.16  kv- 34.5  kv 


JR89  628-6 


Figure  2:  Electric  Power  Components 


and  other  important  functions  could 
experienceproblems. 

Of  greater  concern  to  the  electric 
power  industry  are  embedded  com¬ 
puters — small  electronic  chips  or 
control  devices.  These  chips  are 
used  extensively  in  all  parts  of  the 
electric  power  industry  including 
generating  plants,  transmission  lines, 
distribution  systems,  and  power 
control  systems.  Even  though  only  a 
small  number  of  these  embedded 
devices  will  have  a  Y2K  problem,  it  is 
impossible  to  tell  which  ones  until 
each  chip  has  been  checked  and 
tested — a  time  consuming  venture. 

Making  matters  worse,  electronic 
chips  are  generally  mass-produced 


without  knowing  the  ultimate  appli¬ 
cation  of  the  chip.  A  single  circuit 
board  can  have  20-50  of  these  chips 
from  various  manufacturers.  Be¬ 
cause  of  the  diversity  of  chip 
suppliers,  one  vendor  may  use  a 
different  mix  of  chips  even  within  de¬ 
vices  labeled  with  the  same  name, 
model  number,  and  year.  Many  of 
these  chips  have  built-in  clocks  that 
may  experience  date  change 
anomalies  associated  with  Y2K 

There  are  numerous  mission  critical 
systems  essential  to  the  production, 
transmission,  and  delivery  of  electric 
power.  Y2K  risks  in  electric  power 
can  be  grouped  into  five  areas. 
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1 .  Power  Production  Systems 

Generating  units  must  be  able  to  op¬ 
erate  through  critical  Y2K  periods 
without  disruption.  Units  that  are 
scheduled  to  operate  must  be  able  to 
start  up  and  deliver  electricity  as 
planned.  The  threat  is  most  severe  in 
power  plants  with  Digital  Control 
Systems  (DCSs).  Many  older  plants 
operating  with  analog  controls  may 
be  less  problematic.  Numerous 
control  and  protection  systems  within 
the  DCS  use  time-dependent  algo¬ 
rithms,  which  may  result  in 
generating  unit  trips  when  encoun¬ 
tering  a  Y2K  anomaly.  Digital 
controllers  that  have  been  built  into 
station  equipment,  protection  relays, 
and  communications  may  also  pose 
risks. 

2.  Energy  Management  Systems 

There  are  approximately  200  bulk 
electric  control  centers  in  North 
America.  From  these  control  cen¬ 
ters,  system  operators  monitor  and 
control  the  backbone  of  the  electrical 
systems  and  dispatch  generation  to 
meet  demand.  Computer  systems 
within  these  control  centers  use 
complex  algorithms  to  manage  the 
operations  of  transmission  facilities 
and  to  dispatch  generating  units.  At 
any  moment  in  time,  a  percentage 
(usually  10-20%)  of  generating  units 
may  be  on  automatic  control  for  the 
purpose  of  following  load  and  regu¬ 
lating  interconnection  frequency. 
Many  of  the  control  center  software 
applications  contain  built-in  time 
clocks  used  to  run  various  power 
system  monitoring,  dispatch,  and 
control  functions.  Some  energy 
management  systems  are  depend¬ 


ent  on  time  signal  emissions  from 
Global  Positioning  Satellites.  Be¬ 
yond  the  200  operating  centers, 
there  are  hundreds  of  additional 
control  centers  used  to  manage  sub¬ 
transmission  and  distribution  sys¬ 
tems.  These  systems  are  typically 
operated  using  a  subset  of  an  en¬ 
ergy  management  system,  called 
Supervisory  Control  and  Data  Acqui¬ 
sition  (SCADA). 

3.  Telecommunications  Systems 

Electric  power  systems  are  highly 
dependent  on  microwave,  telephone, 
VHF  radio,  and  satellite  communica¬ 
tions.  If  the  control  centers  are  the 
“brains”  of  the  electrical  grids,  com¬ 
munications  systems  are  the 
“nervous  system.”  Telecommunica¬ 
tions  is  the  single  most  important 
area  in  which  the  electric  systems 
depend  on  another  industry.  Many 
of  the  telephone,  microwave,  and 
network  services  used  for  communi¬ 
cations  in  the  electric  industry  are 
provided  by  telephone  companies 
and  other  communications  and  net¬ 
work  service  providers.  The 
dependency  of  electric  supply  and 
delivery  systems  on  external  service 
providers  is  a  crucial  factor  in  suc¬ 
cessful  performance  during  Y2K 
transition  periods. 

4.  Substation  Control  Systems 

Throughout  electric  transmission  and 
distribution  systems  there  are  sub¬ 
stations  that  contain  control 
equipment  such  as  circuit  breakers, 
disconnect  switches,  and  transform¬ 
ers.  Remote  terminal  units  (RTUs) 
in  substations  serve  as  the  commu¬ 
nications  hubs  for  the  substations, 
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allowing  them  to  communicate  with 
the  control  centers.  Substations  also 
contain  most  of  the  transmission  and 
distribution  system  protection  relays, 
which  serve  to  operate  circuit  break¬ 
ers  to  quickly  isolate  equipment 
should  an  electrical  fault  occur  on  a 
line,  transformer,  or  other  piece  of 
equipment. 

5.  Distribution  Systems 

Distribution  systems  deliver  electric¬ 
ity  from  the  transmission  network  to 
customers.  There  is  a  lot  of  com¬ 
monality  in  the  types  of  substation 
equipment  in  distribution  compared 
to  transmission.  Distribution  sys¬ 
tems  have  additional  equipment 
outside  substations  (for  example, 
along  a  distribution  feeder)  that  may 
have  electronic  controls.  Examples 
include  reclosers  (relays  that  open 
and  close  a  feeder  in  rapid  succes¬ 
sion  to  allow  a  fault  to  clear), 
capacitors,  voltage  regulators,  and 
special  monitoring  devices. 

Although  the  five  areas  outlined 
above  focus  directly  on  the  produc¬ 
tion  and  delivery  of  electricity,  other 
support  systems  are  essential  to 
sustained  operations  of  the  electrical 
service  provider.  These  systems 
have  been  grouped  under  the  head¬ 
ing  “Business  Information  Systems” 
in  this  report.  They  include  among 
others  customer  service  call  centers, 
supply  and  inventory  systems,  and 
accounting  systems. 

Major  Players 

Several  federal  organizations  are  in¬ 
volved  in  various  aspects  of  the 
electric  power  industry.  Primary  are 


the  Department  of  Energy’s  (DOE) 
whose  mission  is  to  formulate  a 
comprehensive  energy  policy  en¬ 
compassing  all  national  energy 
resources,  including  electricity;  and 
the  Federal  Energy  Regulatory 
Commission  (FERC),  an  independ¬ 
ent  agency  overseeing  the  natural 
gas  industry,  the  electric  utilities, 
non-federal  hydroelectric  projects, 
and  oil  pipeline  transport.  Other  fed¬ 
eral  agencies  that  oversee  the 
electric  power  transmission  and  dis- 
''  tribution  industry  include 

•  the  Nuclear  Regulatory  Commis¬ 
sion  (NRC), 

•  the  Rural  Utility  Service  (RUS), 

•  the  Environmental  Protection 
Agency  (EPA),  and 

•  the  Securities  and  Exchange 
Commission  (SEC). 

At  the  request  of  DOE,  the  North 
American  Electric  Reliability  Council 
(NERC) — a  non-federal  entity — has 
assumed  the  primary  role  in  moni¬ 
toring  the  overall  Y2K  preparedness 
of  the  electric  power  industry.  NERC 
is  a  logical  choice  for  this  role  be¬ 
cause  it  is  the  organization  most 
involved  in  keeping  the  lights  on  in 
North  America. 

Formed  in  1968  in  response  to  a 
cascading  blackout  that  left  almost 
30  million  people  without  electricity, 
members  are  drawn  from  all  owner¬ 
ship  segments  of  the  industry — 
investor-owned,  federal,  state, 
municipal,  rural,  and  provincial. 
NERC  is  a  nonprofit  corporation 
composed  of  ten  regional  councils. 

The  members  of  the  regional  coun¬ 
cils  are  electric  utilities,  independent 
power  producers  and  electricity 
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marketers  that  account  for  most  of 
the  electricity  supplied  in  the  United 
States,  Canada,  and  Mexico. 

State  public  utility  commissions 
(PUCs)  play  the  most  significant  role 
regulating  the  electric  power  indus¬ 
try.  PUCs  control  the  rate  structure 
for  all  municipal  utilities,  investor- 
owned  utilities,  and  rural  electric  co¬ 
operatives  that  own,  maintain,  or 
operate  an  electric  generation, 
transmission,  or  distribution  system 
within  a  state.  By  controlling  what 
constitutes  an  allowable  charge, 
classifying  accounts,  and  structuring 
rates,  the  PUCs  can  exert  significant 
influence  over  utilities.  The  PUCs 
also  regulate  reliability  for  both  op¬ 
erational  and  emergency  purposes, 
oversee  territorial  agreements,  and 
resolve  territorial  disputes  between 
utilities. 

Other  significant  Y2K  players  in  the 
electrical  power  industry  include  the: 

•  American  Public  Power  Associa¬ 
tion  (APPA) 

•  Electric  Power  Research  Institute 
(EPRI) 

•  National  Rural  Electric  Coopera¬ 
tive  Association  (NRECA) 

•  Edison  Electric  Institute  (EEI) 

•  Nuclear  Energy  Institute  (NEI) 

•  Canadian  Electric  Association 
(CEA) 

Major  Initiatives 

The  Senate  Year  2000  Committee 
held  its  first  hearing  on  energy  utili¬ 
ties  on  June  12,  1998.  We  received 
testimony  from  Administration  offi¬ 
cials  and  key  players  in  the  electrical 
power  industry  including  John  Koski- 


nen,  Chairman,  President’s  Council 
on  Year  2000  Conversion;  Elizabeth 
Moler,  Deputy  Secretary  DOE; 
Shirley  Ann  Jackson,  Chairman, 
NRC;  Michehl  Gent,  President, 
NERC;  and  Dr.  Charles  Siebenthal, 
Manager  Y2K  Programs,  EPRI.  In 
addition,  because  of  the  lack  of  data 
on  the  overall  status  of  the  electric 
power  industry,  the  Committee  con¬ 
ducted  a  survey  of  large  electric  and 
gas  and  oil  utilities. 

The  Committee’s  survey  results 
clearly  indicated  that  electric  utilities 
did  not  have  an  accurate  picture  of 
their  current  state  of  Y2K  readiness. 
Most  utilities  had  just  begun  to  as¬ 
sess  their  systems  and  embedded 
devices 

John  Koskinen  outlined  the  structure 
of  the  President’s  Y2K  Council  and 
reported  that  DOE  would  head  the 
electric  power  sector. 

DOE  testified  that  it  lacked  the 
regulatory  authority  to  force  industry 
compliance.  DOE  asked  NERC  for 
help  in  building  an  understanding  of 
Y2K  efforts  in  the  electric  power  in¬ 
dustry.  NERC  also  assumed 
responsibility  for  surveying  the  in¬ 
dustry. 

APPA,  where  members  include 
many  state  and  local  municipal  elec¬ 
tricity  providers,  is  coordinating 
information  sharing  and  surveys  of 
its  members,  as  well  as  smaller  non¬ 
member  public  power  utilities.  APPA 
is  assisting  NERC  in  the  industry¬ 
wide  readiness  review  of  electric 
distribution  systems. 
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EPRI  is  focusing  its  Y2K  program  on 
embedded  systems  and  the  associ¬ 
ated  Y2K  technical  and  project 
management  issues.  Over  one  hun¬ 
dred  companies  are  participating  in 
the  EPRI  information-sharing  pro¬ 
gram,  representing  over  74  percent 
of  the  electric  power  consumed  in 
North  America. 

EEI  represents  investor-owned  utili¬ 
ties.  It  has  established  a  program  to 
address  Y2K  technical,  regulatory, 
and  liability  issues.  EEI  is  also  as¬ 
sisting  in  the  readiness  review  of 
electric  distribution  systems. 

NRECA  is  coordinating  Y2K  readi¬ 
ness  assessments  and  information 
sharing  among  its  membership, 
which  includes  nearly  1,000  rural 
electric  systems. 

NEI  is  coordinating  the  assessment 
of  Y2K  readiness  of  U.S.  nuclear  fa¬ 
cilities  and  is  providing  that  informa¬ 
tion  as  part  of  the  NERC  surveys. 

CEA  is  assisting  NERC  by  coordi¬ 
nating  efforts  in  Canada,  particularly 
to  address  the  readiness  of  electric 
distribution  systems  and  Canadian 
nuclear  facilities. 

Assessment 

At  the  time  of  the  hearing,  there  was 
a  lack  of  industry-wide  survey  data  of 
the  electric  power  industry.  As  a  re¬ 
sult,  the  Committee  staff  surveyed 
five  large  electric  and  five  large  gas 
and  oil  companies  to  obtain  cursory 
readiness  information.  Figure  3  be¬ 
low  displays  the  result  of  the  survey. 


Based  on  the  survey  results,  the 
Committee  concluded  that  the  utili¬ 
ties  were  proceeding  in  the  right 
direction,  but  the  pace  of  remedial 
efforts  was  too  slow  and  there  was 
so  much  remaining  to  be  done  that 
there  was  significant  cause  for  con¬ 
cern.  Only  two  of  the  eight  firms 
reported  completion  of  assessment, 
making  assertions  of  Y2K  compli¬ 
ance  by  December  1999  highly 
suspect.  Committee  concern  was 
heightened  because  the  most  diffi¬ 
cult  ta§ks — renovation  and  testing — 
were  yet  to  come. 

The  utilities’  lack  of  information  re¬ 
garding  Y2K  compliance  of  their 
major  suppliers,  vendors,  and  serv¬ 
ice  providers  created  additional 
concerns  about  the  utilities  asser¬ 
tions  of  readiness.  The  survey 
results  raise  significant  levels  of  con¬ 
cern  given  that  the  firms  surveyed 
were  among  the  largest  utilities  and 
were  dedicating  many  resources  to 
Y2K  (collectively  over  $400  million). 
Smaller  firms  with  fewer  resources 
are  presumably  further  behind  in 
their  Y2K  remediation  efforts. 

On  September  17,  1998,  three 

months  after  the  Committee’s  hear¬ 
ing,  NERC  issued  its  first 
comprehensive  report  of  electrical 
power  industry  readiness  based  on 
survey  data  collected  at  the  end  of 
August.  It  has  issued  two  monthly 
updates  since  that  time.  Participation 
by  the  200  bulk  electric  operating 
entities  increased  from  144  in  August 
to  155  and  188  in  the  September 
and  October  surveys,  respectively. 
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Figure  3:  Committee  Survey  Results 


About  2,200  of  the  3,000  distribu¬ 
tion  entities,  i.e.,  the  actual  electric 
utilities  have  participated  in  the 
NERC  process  by  responding  to 
data  gathered  by  APPA  and  NRECA 
and  providing  it  to  the  appropriate 
bulk  electric  operating  entity. 
NERC's  overall  survey  results  are 
depicted  in  figure  4. 

While  the  NERC  surveys  clearly 
show  progress  in  August,  Sep¬ 
tember,  and  October,  the  question 
is  whether  there  is  sufficient  time 
to  complete  Y2K  remediation  ef¬ 
forts.  The  data  presented  in  the 
NERC  report  do  not  seem  to  support 
the  optimistic  tone  contained  in  the 
report’s  executive  summary.  Of  par¬ 


ticular  concern  is  that,  with  only  a 
little  over  a  year  to  go,  34%  of  the 
firms  are  operating  without  a  written 
plan. 

In  addition,  the  assessment  phase  is 
only  75%  complete  (federal  agencies 
are  99%  complete  with  this  phase). 
Remediation  and  testing  is  only  36% 
complete.  Given  that  Y2K  experts 
contend  that  between  40  and  70%  of 
the  total  effort  will  be  expended  in 
testing  alone,  there  may  not  be  suffi¬ 
cient  time  to  complete  this. 

The  highly  interconnected  nature  of 
the  grids  raises  concern  about  cas¬ 
cading  failures.  This  in  turn  obviates 
the  need  for  contingency  plan- 
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Y2K  STATUS  OF  ELECTRIC 
POWER  INDUSTRY 


Figure  4:  NERC  Monthly  Status  Reports 


While  these 
problems  should 
not  affect  plant 
safety,  they  could 
cause  serious 
electricity  pro¬ 
duction  problems. 
While  NRC  has 
legal  .  authority 
only  to  address 
plant  safety  is¬ 
sues,  it  is  working 
closely  with  NEI 
to  assess  nuclear 
plants.  NRC 
plans  detailed 
Y2K  assess- 
_  ments  of  12  of 


ning,  particularly  plans  for  address¬ 
ing  capacity  shortages  and 
overages — of  which  only  1 3%  of  the 
firms  surveyed  have  in  place. 

Although  nuclear  plants  are  ad¬ 
dressed  in  the  overall  NERC  study, 
public  concern  about  their  safety 
dictates  that  the  Committee  provide 
specific  information  regarding  the 
overall  Y2K  preparedness  of  these 
plants.  Nuclear  facilities  are  lagging 
behind  other  electric  facilities  in  their 
Y2K  assessment  and  remediation 
efforts. 

In  general,  nuclear  facilities  contain 
very  old  analog  technology  and,  as  a 
result,  have  fewer  Y2K  issues  than 
the  more  digital  and  modern  fossil 
fuel  facilities.  Nevertheless,  as¬ 
sessments  to  date  have  revealed 
varying  degrees  of  problems  in  areas 
such  as  plant  process  control,  feed 
water  monitoring,  refueling,  turbine 
control,  and  building  security  and  ac¬ 
cess  control. 


the  nearly  70  nu¬ 
clear  facilities.  It  has  completed  as¬ 
sessments  on  six  of  these  plants, 
and  has  issued  reports  on  the  first 
three.  These  reports  are  publicly 
available  on  NRC’s  web  site. 

Concerns 

•  While  complete  power  grid  failure 
and  prolonged  blackout  is  highly 
unlikely,  failure  of  at  least  some 
parts  of  the  electric  power  indus¬ 
try,  e.g.,  local  or  regional 
outages,  is  possible.  The  3200 
electric  utilities  are  at  various 
stages  of  remediation.  The  likeli¬ 
hood  of  outages  in  a  given  area 
is  directly  related  to  the  overall 
preparedness  of  the  individual 
electric  utility  serving  that  area. 

•  Overall  Y2K  remediation  prog¬ 
ress  has  been  slow  due  to  the 
industry’s  late  start,  the  complex¬ 
ity  of  the  power  grids,  and  the 
magnitude  of  the  problems.  As  a 
result,  power  companies  must 
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step  up  their  efforts,  and  develop 
workable  contingency  plans  in 
the  event  their  best  efforts  fall 
short. 

The  interconnectivity  of  the  elec¬ 
tric  generation  and  transmission 
entities  making  up  the  grids  is  a 
strength  and  a  weakness.  On  the 
one  hand,  interconnectivity  pro¬ 
vides  flexibility  in  that  electricity 
can  be  routed  around  trouble 
spots.  On  the  other  hand,  out¬ 
ages  in  one  part  of  the  grid  could 
affect  power  in  other  parts  of  the 
grid.  There  are  no  comprehen¬ 
sive  studies  concerning  the 
number  of  entities  that  would 
have  to  fail  to  put  the  entire  grid 
at  risk,  but  some  experts  suggest 
that  it  may  be  a  very  small  per¬ 
centage  if  in  key  locations. 

The  interrelationship  of  the  elec¬ 
tric  power  sector  with  other 
sectors  it  depends  on — telecom¬ 
munications,  natural  gas  and  oil 
supplies  and  pipelines,  and  rail 
transportation  for  coal  supplies — 
requires  close  coordination. 
There  are  signs  that  this  coordi¬ 
nation  is  beginning,  but  efforts 
need  to  be  stepped  up  so  that  the 
electric  utilities  can  engage  in 
more  meaningful  contingency 
planning. 

The  bulk  power  entities  are 
spending  large  amounts  of 
money  on  Y2K  remediation  and 
most  are  making  good  progress. 
Of  greater  concern  are  some  of 
the  smaller  and  medium-sized 
distribution  entities  that  may  not 
have  sufficient  resources  to  de¬ 
vote  to  the  problem.  Each  is  an 


essential  link  to  the  overall  suc¬ 
cess  of  the  industry. 

•  State  public  utility  commissioners 
must  play  an  active  role  in  en¬ 
suring  that  the  electrical  utilities 
under  their  purview  are  taking 
appropriate  Y2K  remediation,  risk 
reduction,  and  contingency  plan¬ 
ning  actions.  In  addition,  they 
should  keep  the  public  informed 
about  the  status  of  the  utilities. 

•  Nuclear  plants  are  at  various 
stages  of  Y2K  remediation. 
Some  have  only  recently  begun 
to  assess  the  systems  within  their 
plants.  Even  if  for  no  other  rea¬ 
son  than  to  allay  public  concern, 
NRC  needs  to  expand  its  detailed 
Y2K  assessments  to  include  all 
nuclear  plants.  In  addition,  not 
withstanding  the  NRC  charter  of 
addressing  safety  issues  only,  it 
needs  to  broaden  the  scope  of  its 
Y2K  assessments  to  include  op¬ 
erational  issues  as  well. 

•  The  electric  industry  is  in  the 
middle  of  a  major  restructuring  to 
introduce  wholesale  and  retail 
competition  for  electricity.  Atten¬ 
tion  has  been  on  competing  in 
the  marketplace,  cutting  costs, 
mergers,  reorganizations,  and 
survival.  The  industry  must  find  a 
way  to  ensure  that  all  of  this  re¬ 
structuring  activity  does  not 
interfere  with  the  more  immediate 
concerns  of  timely  Y2K  remedia¬ 
tion. 
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OIL  &  GAS  UTILITIES 

This  sector  covers  both  oil  products 
and  natural  gas,  however,  the  Com¬ 
mittee’s  hearing  focused  primarily  on 
natural  gas  as  the  principle  source  of 
residential  heating.  Oil  provides 
about  40  percent  of  the  energy 
Americans  consume,  including  home 
heating.  In  addition,  about  60  million 
American  homes  and  businesses 
use  natural  gas  for  heating,  cooking, 
and  other  applications. 

Gas  and  oil  utilities  face  a  variety  of 
Y2K  problems  in  their  administrative 
systems,  as  well  as  the  microproc¬ 
essors  or  computer  chips  embedded 
in  the  production,  transportation  and 
distribution  systems  used  in  this  in¬ 


dustry.  Survey  results  published  by 
the  Federal  Energy  Regulatory 
Commission  (FERC)  in  September 
1998  show  that  this  industry,  like 
many  others,  started  its  Y2K  efforts 
late. 

According  to  the  survey,  most  of  the 
critical  systems  in  this  industry  are 
still  in  the  inventory  and  assessment 
phase,  leaving  little  time  for  the  more 
difficult  phases  of  Y2K  remediation 
and  testing.  As  a  result,  the  industry 
is  not  likely  to  complete  repairs  of  all 
of  its  system  in  time,  which  in  turn 
means  that  possible  disruptions  in 
the  production,  transportation,  and 
distribution  of  gas  and  oil  are  possi¬ 
ble. 


Y2K  Overview  for  Gas  Processes 
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Automation  and,  thus,  Y2K  concerns 
are  prevalent  throughout  both  the 
gas  and  oil  industries.  As  depicted 
in  figure  5,  FERC  published  a  ge¬ 
neric  diagram  that  maps  out  the 
elements  of  gas  and  oil  production, 
transmission,  and  distribution  that 
must  be  checked  for  Y2K  problems. 

Note:  This  year,  the  Committee 
plans  to  increase  attention  to  the  oil 
industry,  particularly  the  international 
Y2K  implications  on  oil  imports.  The 
U.S.  gets  nearly  50  percent  of  its  oil 
from  imports,  and  several  key  oil 
producing  countries  are  behind  in 
their  Y2K  remediation  efforts.  If 
these  countries  are  unable  to  sustain 
the  level  of  imports  because  of  Y2K 
failures  in  the  pumping,  refining,  or 
transportation  of  crude  oil,  the  impli¬ 
cations  on  the  price  of  gasoline  may 
be  significant. 

Overview 

Nearly  all  Americans  rely  on  oil  and 
gas  in  their  everyday  lives.  Oil  pro¬ 
vides  about  40  percent  of  the  energy 
Americans  consume.  Besides  the 
obvious  gasoline,  diesel  fuel,  and 
home  heating  oil,  petroleum  products 
are  used  in  everything  from  tooth¬ 
paste  to  raincoats.  A  barrel  of  crude 
oil  (42  gallons)  is  refined  into 


Product 

Gallons' 

Gasoline 

19.5 

Fuel  oil 

9.2 

Jet  fuel 

4.1 

Residual  fuel 

2.3 

Liquefied  gas 

1.9 

Still  gas 

1.9 

Coke 

1.8 

Asphalt 

1.3 

Petrochemicals 

1.2 

Lubricants 

0.5 

Kerosene 

0.2 

Other 

0.3 

‘Totals  more  than  42  gallons  due  to 
processing  gains. 

Almost  60  million  American  homes 
and  businesses  use  natural  gas  for 
heating,  hot  water,  cooking  and  other 
applications.  Natural  gas  comes 
through  a  1.3  million-mile  under¬ 
ground  system.  The  U.S.  has  about 
58,000  miles  of  gathering  lines  in  the 
gas  production  areas,  260,000  miles 
of  long-distance  pipelines,  and 
nearly  1  million  miles  of  distribution 
lines  operated  by  local  gas  utilities 
that  must  all  be  checked  for  Y2K 
problems. 

Thousands  of  embedded  systems  in 
millions  of  miles  of  pipelines  all  must 
be  checked  and,  if  necessary,  re¬ 
placed.  Vulnerable  systems  include 
distributed  control  systems,  pro¬ 
grammable  logic  controllers,  digital 
recorders,  control  stations,  record¬ 
ers,  meters,  meter  reading  and 
calibration  software,  and  SCADA. 
PC-based  applications  such  as  con¬ 
trol  and  work  management  software 
within  a  utility  may  also  possess  Y2K 
vulnerability.  Any  date-dependent 
application,  system  or  component 
may  experience  problems  that  result 
in  complete  system  or  station  shut¬ 
down. 

The  President’s  Council  on  Year 
2000  Conversion  assigned  FERC 
responsibility  for  the  gas  and  oil 
sector.  Other  federal  agencies  in¬ 
volved  in  this  sector  include  the 
Department  of  Energy,  the  De- 
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partment  of  Transportation  (pipelines 
are  a  form  of  interstate  transporta¬ 
tion),  the  Department  of  the  Interior, 
and  the  General  Services  Admini¬ 
stration. 

Trade  associations  representing  the 
various  gas  and  oil  entities  are  also 
playing  a  key  role  in  Y2K  remedia¬ 
tion  efforts  for  this  industry. 1 

Major  Initiatives 

The  Committee’s  energy  utility 
hearing  was  held  on  June  12,  1998. 
As  described  in  the  previous  section, 
both  electric  utilities  and  oil  and  gas 
utilities  were  addressed.  Gas  and  oil 
witnesses  included,  the  Honorable 
James  Hoecker,  Chairman,  FERC, 
Mr.  James  Rubright,  Executive  Vice 
President,  Sonat,  Inc.  representing 
INGAA,  arid  Gary  Gardner,  Chief 
Information  Officer,  AGA,  and  Lou 
Marcoccia,  energy  industry  consult¬ 
ant. 

The  hearing  better  defined  the  Y2K 
problem  in  the  gas  and  oil  sector, 
heightened  awareness,  and  mobi¬ 
lized  an  industry  that  was  not  yet 
fully  engaged  in  addressing  the  Y2K 
problem. 


The  American  Petroleum  Institute  (API),  the  Natural 
Gas  Council  (NGC),  the  American  Gas  Association 
(AGA),  the  American  Public  Gas  Association  (APGA), 
the  Gas  Research  Institute  (GRI),  the  Interstate  Natural 
Gas  Association  of  American  (INGAA),  the  Independent 
Petroleum  Association  of  America  (IPAA),  the  Associa¬ 
tion  of  Oil  Pipelines  (AOPL),  the  Gas  Processors 
Association  (GPA),  the  National  Gas  Supply  Associa¬ 
tion  (NGSA),  the  Gas  Industries  Standards  Board 
(GISB),  the  National  Petroleum  &  Refiners  Association 
(NPRA),  the  National  Propane  Gas  Association 
(NPGA),  the  Petroleum  Marketers  Association  of 
America  (PMAA),  and  the  Petroleum  Technology 
Transfer  Council  (PTTC). 


In  his  testimony,  Mr.  Hoecker  indi¬ 
cated  that  the  Y2K  status  of  the  gas 
and  oil  industry  is  essentially  un¬ 
known.  He  was  especially 
concerned  about  small  and  medium 
sized  companies  and  focused  on  the 
need  for  the  gas  and  oil  industry  to 
share  Y2K  testing  and  compliance 
information.  He  indicated  that  Y2K 
readiness  information  might  be  diffi¬ 
cult  to  obtain  because  of  fear  that  the 
information  may  be  commercially 
sensitive,  that  certain  liability  issues 
may  arise,  or  that  collaboration  on 
this  problem  may  expose  companies 
to  anti-trust  actions. 

The  Committee  was  key  to  passing 
Y2K  information  disclosure  legisla¬ 
tion  and  obtaining  clarification  from 
the  Justice  Department  to  exempt 
Y2K  information  exchange  from  anti¬ 
trust  laws.  Mr.  Hoecker  also  sug¬ 
gested  that  a  Y2K  database  be 
established.  API  has  since  set  up 
such  a  database. 

Mr.  Rubright,  representing  the  inter¬ 
state  gas  pipeline  companies, 
highlighted  the  extensive  use  of  em¬ 
bedded  chips  in  the  computerized 
devices  instrumental  to  the  operation 
and  monitoring  of  gas  and  oil  pipe¬ 
lines.  According  to  him,  most 
pipeline  companies  contend  they  will 
be  Y2K  ready  by  October  1999,  but 
are  concerned  over  both  upstream 
and  downstream  suppliers,  as  well 
as  utilities  and  telecommunications 
providers  on  which  they  rely.  He 
also  expressed  concern  over  litiga¬ 
tion  risks,  the  large  number  of 
congressional  electronic  commerce 
initiatives,  and  anti-trust  issues. 
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Mr.  Gardner,  representing  gas 
utilities,  focused  on  the  complexity  of 
gas  distribution  systems.  He  indi¬ 
cated  that  a  gas  utility  will  typically 
have  between  50  and  100  systems 
with  embedded  processing  located  in 
such  areas  as  storage  fields,  gas 
control  and  management  operations, 
metering  and  facilities,  and  SCADA 
systems.  His  industry’s  experience 
suggests  that  the  process  of  identi¬ 
fying,  replacing  or  upgrading,  and 
testing  takes  12  to  18  months  to 
complete. 

The  Committee’s  hearing  was  in¬ 
strumental  in  motivating  the 
President’s  Council  on  Y2K  Conver¬ 
sion  to  create  an  oil  and  gas  working 
group.  The  kick-off  meeting  for  the 
oil  and  gas  group  was  held  at  FERC 
in  June  1998. 

FERC  has  held  subsequent  meet¬ 
ings  on  July  14,  1998,  September  3, 
1998,  and  November  13,  1998. 
Minutes  of  the  Oil  and  Gas  Working 
Group  meetings  and  other  proceed¬ 
ings  and  events  are  publicly 
available  on  FERC’s  website. 

API,  a  national  trade  association  rep¬ 
resenting  all  phases  of  the  oil  and 
gas  industry,  provides  direct  assis¬ 
tance  to  FERC  in  managing  the 
working  group.  In  1997,  the  API 
formed  a  Year  2000  Task  Force  to 
facilitate  Y2K  readiness  across  the 
petroleum  industry.  The  API  Year 
2000  Task  Force  currently  repre¬ 
sents  over  50  industry  companies 
and  meets  every  6  to  7  weeks. 

One  of  API’s  primary  functions  is  to 
alert  and  educate  industry  members 
about  the  potential  impact  of  Y2K  on 


information,  process  control,  auto¬ 
mation  and  instrumentation  systems, 
as  well  as  concerns  about  other 
companies  in  the  supply  chain.  API 
has  also  created  a  database  to  allow 
companies  to  share  information 
about  the  readiness  status  of  com¬ 
puter  software  and  hardware, 
telecommunications  networks,  proc¬ 
ess  control  and  electrical  equipment, 
and  embedded  systems  used  by  the 
petroleum  industry. 

AGA,  a  trade  association  of  almost 
300  natural  gas  transmission,  distri¬ 
bution,  gathering  and  marketing 
companies,  and  181  local  natural 
gas  utilities  that  deliver  gas  to  54 
million  homes  and  businesses,  has 
also  been  actively  involved  in  Y2K. 
AGA  members  account  for  more 
than  90  percent  of  natural  gas  deliv¬ 
ered  in  the  United  States. 

AGA  sponsors  business  television 
series,  joint  information  technology 
conferences,  and  other  forums  to 
inform  its  membership  of  Y2K  solu¬ 
tions. 

Assessment 

The  Committee’s  survey,  depicted  in 
figure  3,  included  both  electric  and 
gas  and  oil  utility  companies.  Con¬ 
cerns  resulting  from  the  survey 
expressed  in  the  electric  utility  sec¬ 
tion  of  this  report  also  apply  to  the 
gas  and  oil  utilities.  Progress  is  slow 
progress,  assertions  that  they  will 
complete  Y2K  remediation  efforts  in 
time  are  overly  optimistic,  the  indus¬ 
try  lacks  knowledge  about  suppliers’ 
Y2K  status,  and  contingency  plan¬ 
ning  is  deficient. 
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The  Committee’s  survey,  although 
limited  in  scope,  was  the  only  avail¬ 
able  survey  at  the  time.  Since  then, 
FERC  released  its  first  overall  as¬ 
sessment  of  the  Y2K  status  and 
preparedness  of  the  gas  and  oil  in¬ 
dustry  on  September  18,  1998.  AGA 
in  coordination  with  the  Gas  Re¬ 
search  Institute  and  the  Interstate 
Natural  Gas  Association  of  America 
collected  and  analyzed  surveys  of  its 
members  to  assess  the  industry's 
compliance  with  Y2K  requirements. 
These  surveys  form  the  basis  for  the 
FERC  assessment.  Assessment  re¬ 
sults  are  depicted  in  figure  6  for 
business  systems  and  figure  7  for 
embedded  systems. 

The  survey  was  sent  to  over  8,000 
gas  and  oil  companies.  Only  638  or 
less  than  10%  responded.  Although 
the  response  was  disappointing,  it 
did  represent  45%  of  oil  and  gas 
production,  78%  of  refining  capacity, 
70%  of  crude  and  product  pipeline 
deliveries,  and  43%  of  U.S.  service 
stations. 

The  survey  asked  companies  to  indi¬ 
cate  the  stage  their  companies  were 
in  for  business  systems  and  for  em¬ 
bedded  systems.  This  required 
companies  to  summarize  information 
at  too  high  a  level  to  be  meaningful. 
In  reality,  a  company  may  have  hun¬ 
dreds  or  even  thousands  of  business 
and  embedded  systems  each  at  a 
different  stage  of  remediation.  Nev¬ 
ertheless,  the  survey  results  are  still 
alarming.  The  survey  indicates  that 
45%  of  companies  who  responded 
consider  themselves  to  be  in  the  as¬ 
sessment  phase  or  earlier  for 
business  systems,  and  60%  for  em¬ 
bedded  systems. 


The  Committee  can  only  conclude 
that,  despite  claims  to  the  contrary, 
many  companies  in  the  gas  and  oil 

Y2K  Readiness  As  of  September  ‘98 

Business  Information  Systems  &  Associated  Software 


Figure  6 

Y2K  Readiness  As  of  September  ‘98 

Embedded  Systems 


Percent  of 
Responses 


Figure  7 

industry  will  not  complete  Y2K  reme¬ 
diation  efforts  in  time.  This 
conclusion  is  based  on  the  fact  that 
only  companies  with  the  most  robust 
programs  typically  respond  to  Y2K 
surveys.  Y2K  consultants  estimate 
that  remediation  and  testing  are  the 
most  difficult  phases,  often  consum¬ 
ing  up  to  40  to  70%  of  the  entire  Y2K 
effort. 

Survey  respondents  all  contend  that 
they  will  be  Y2K  ready  in  time — 76% 
by  June  1999  and  the  remaining 
24%  by  December  1999.  However, 
based  on  the  progress  to  date,  and 
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the  experience  regarding  the  amount 
of  time  and  resources  it  takes  to 
complete  the  remaining  phases,  this 
contention  may  be  unrealistic.  The 
Committee  recommends  that  the 
companies  who  are  lagging  this  far 
behind,  i.e.,  are  still  in  the 
assessment  phase  or 
earlier,  devote  significant 
resources  to  contingency 
planning  because  they  will 
not  have  sufficient  time  to 
repair  and  test  all  of  their 
mission  critical  systems  in 
the  limited  time  remaining. 


One  of  the  biggest  areas  of 
concern  for  the  Committee 
is  the  Y2K  status  of 
countries  from  which  the 
U.S.  imports  oil.  Nearly 
50%  of  the  oil  used  in  the 
U.S.  comes  from  foreign 
sources.  Yet,  as  depicted 
in  figure  8,  many  of  the  countries  are 
significantly  behind  the  U.S.,  and 
thus,  have  a  high  risk  of  failure.  In¬ 
deed,  3  of  the  top  5  countries  from 
which  the  U.S.  imports  oil  are,  ac¬ 
cording  to  the  Gartner  Group,  12  to 
18  months  behind  the  U.S.  in  their 
Y2K  remediation  efforts.  This  means 
that  oil  production  and  transportation 
may  be  at  risk  in  these  countries. 
Any  disruption  to  oil  imports  could 
significantly  impact  oil  availability 
and,  thus,  prices  in  the  U.S.  The  oil 
industry  and  the  federal  government 
need  to  monitor  this  situation  closely. 

Concerns 

•  Y2K  remediation  in  the  gas  and 
oil  sector  began  too  late  and  is 
progressing  too  slowly.  The 
thousands  of  miles  of  pipeline 


that  must  be  checked  and  re¬ 
paired  and  the  proliferation  of 
embedded  chips  and  processors 
throughout  the  industry’s  produc¬ 
tion,  transportation,  and 
distribution  systems  make  failure 


of  at  least  some  mission-critical 
systems  possible.  The  industry 
needs  to  step  up  its  efforts  and 
focus  on  developing  contingency 
plans. 

The  dependence  of  the  gas  and 
oil  industry  on  other  sectors — 
electric  power  and  telecommunica¬ 
tions — dictates  better 

Coordination  with  these  sectors. 

While  the  large  gas  and  oil  com¬ 
panies  are  spending  large 
amounts  of  money  on  Y2K  reme¬ 
diation,  the  Committee  is 
concerned  about  some  of  the 
smaller  and  medium-sized  com¬ 
panies  in  this  industry,  including 
those  up  and  down  the  supply 
chain.  These  small  companies 
could  be  the  linchpins  for  the 


Country 

II : 

WM  '  'v.  * 

Percent 

U.S.  Imports 

Y2K  Status 
(Months  Be- 

Risk  of 
Disruption: 

Venezuela 

16.2 

12-18 

High 

Canada 

15.5 

0-3 

Low 

Saudi  Arabia 

14.4 

12-18 

High 

Mexico 

12.9 

12 

Medium 

Niqeria 

7.3 

12-18 

High 

Angola 

4.2 

Unknown 

? 

Colombia 

3.0 

12-18 

High 

Algeria 

2.9 

Unknown 

? 

Kuwait 

2.9 

12-18 

High 

Virgin  Islands 

2.9 

Unknown 

? 

Norway 

2.3 

12 

Medium 

Iraq 

2.2 

Unknown 

? 

Gabon 

2.0 

Unknown 

? 

United  Kingdom 

2.0 

0-3 

Low 

Ecuador 

0.9 

12-18 

High 

Argentina 

0.9 

12-18 

High 

All  Others 

7.5 

Unknown 

? 

Figure  8:  Imported  Oil  Country  Y2K  Status 


Senate  Special  Committee  on  the  Year  2000  Technology  Problem 


32 


Investigating  The  Impact  of  the  Year  2000  Problem 


overall  success  of  this  industry. 

•  A  Y2K  assessment  of  oil  produc¬ 
ing  countries  is  needed  to 
determine  the  likelihood  that  U.S. 
oil  imports  will  be  disrupted,  and, 
if  so,  what  contingency  planning 
will  be  needed. 


WATER  UTILITIES 


Overview 

Water: 

There  are  approximately  200,000 
public  water  systems  (PWSs)  regu¬ 
lated  under  the  Safe  Drinking  Water 
Act  that  serve  243  million  people  in 
the  United  States.  The  remaining 
population  obtains  their  drinking 
water  from  private  wells. 

PWSs  are  defined  as  community 
water  systems,  non-transient,  non¬ 
community,  or  transient  systems. 
Approximately  60,000  of  the  200,000 
public  water  systems  are  classified 
as  community  water  systems.  A 
community  water  system  provides 
water  to  the  same  population  year 
round.  There  are  3,687  community 
water  systems  in  the  U.S.,  which 
serve  a  population  of  10,000  or 
more,  and  provide  water  to  a  total  of 
204  million  people. 

Approximately  75  percent  of  the 
American  public  is  served  by  large 
community  water  systems  covering 
populations  of  100,000  or  more. 


There  are  over  30  community  water 
systems  serving  populations  in  ex¬ 
cess  of  one  million  people. 

Although  the  community  water  sys¬ 
tems  collectively  serve  a  large 
number  of  people,  most  community 
water  systems  serve  less  than  3,300 
people.  Many  of  those  systems  are 
privately  owned  and  operated. 


A  transient  non-community  water 
system  serves  transitory  customers 
in  non-residential  areas  such  as 
campgrounds,  motels,  and  gas  sta¬ 
tions.  Approximately  57  percent  of 
public  water  systems  are  transient 
non-community  systems.  (Sources: 
EPA  Report  to  Congress,  EPA-810- 
R-93-1.  September  1991,  and 
AWWA/AMWA/NAAW  1998  Survey.) 

Wastewater: 

Seventy-two  percent  of  the  U.S. 
population  (190  million  people)  is 
served  by  centralized  wastewater 
treatment  facilities;  the  remainder  is 
served  by  on-site  systems  (e.g., 
septic  systems). 

There  are  16,000  wastewater  treat¬ 
ment  facilities  nationwide,  with 
operations  ranging  from  less  than 
100,000  gallons  per  day  (about  1/3 
of  the  total  number  of  facilities)  to 
systems  that  treat  over  100  million 
gallons  per  day  (less  than  1%  of  the 
systems). 

Systems  such  as  Prince  William 
County,  Virginia,  and  Independence, 
Missouri,  treat  approximately  10  mil¬ 
lion  gallons  of  sewage  a  day,  while 
the  largest  systems,  such  as 
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those  of  New  York  or  Chicago,  treat 
approximately  1.5  billion  gallons  of 
sewage  per  day. 

Nationwide,  approximately  42  billion 
gallons  of  sewage  are  treated  per 
day. 

About  31%  of  the  U.S.  population  is 
served  by  facilities  that  provide  sec¬ 
ondary  treatment  of  waste  and 
another  31%  is  served  by  facilities 
that  provide  better  than  secondary. 
Fifty  percent  of  the  design  capacity 
of  existing  treatment  plants  allows  for 
better  than  secondary  treatment. 

The  remaining  population  is  served 
either  by  plants  that  have  no  dis¬ 
charge  or  by  individual  on-site 
disposal  systems. 

Municipal  governments  own  95%  of 
wastewater  treatment  facilities,  either 
as  part  of  a  local  government’s  pub¬ 
lic  works  department,  or  as  a 
separate  authority  or  utility  district. 

Typically,  in  small  to  medium-sized 
cities,  the  water  utility  and  wastewa¬ 
ter  treatment  systems  are  operated 
jointly.  In  larger  cities  they  are  usu¬ 
ally  separate  operations.2 

Major  Initiatives 

The  Committee  assessed  the  Y2K 
vulnerability  of  the  water  and  waste- 
water,  and  took  steps  to  increase 
awareness  about  Y2K  issues  in  this 
vital  sector  of  service.  These  include 
staff  networking  with  the  major  water 
and  wastewater  industry  association 


2  Congressional  Research  Service  Briefing  to  Commit- 
tee  Staff  on  06/02/98 


groups  and  the  Environmental  Pro¬ 
tection  Agency  (EPA).  The 
Committee  also  interviewed  numer¬ 
ous  industry  experts,  surveyed  water 
and  wastewater  company  Y2K  pre¬ 
paredness,  and  monitored  other 
industry  surveys  recently  adminis¬ 
tered  by  the  major  water  and 
wastewater  industry  associations. 

The  Committee  staff  has  also  par¬ 
ticipated  with  the  EPA  in  tours  of  five 
local  Washington,  D.C.  area  water 
and  wastewater  treatment  plants  and 
worked  with  the  major  water  and 
wastewater  industry  associations. 
These  include 

•  the  Association  of  Metropolitan 
Water  Agencies  (AMWA), 

•  the  National  Association  of  Water 
Companies  (NAWC), 

•  the  American  Water  Works  Asso¬ 
ciation  (AWWA), 

•  the  Water  Equipment  Manufac¬ 
turers  Association  (WEMA),  and 

•  the  Association  of  Metropolitan 
Sewerage  Agencies  (AMSA). 

On  December  18,  1998,  the  Com¬ 
mittee  held  a  field  hearing  on  Y2K 
preparedness  in  the  water  and 
wastewater  industry  in  Anaheim, 
California.  The  City  of  Anaheim 
Public  Utilities  Department  hosted 
this  hearing.  The  witnesses  were 
Dana  Minerva,  EPA  Deputy  Assis¬ 
tant  Administrator  for  Water;  James 
Brainerd,  Chief  Information  Officer, 
Los  Angeles  Department  of  Water 
and  Power;  James  Ellisor,  Director  of 
Information  Systems,  Las  Vegas 
Water  District;  Patrick  Miles  Informa¬ 
tion  Technology  Director,  Orange 
County  Sanitation  District;  William 
Hetland,  District  Manager,  El  do- 
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rado  Irrigation  District;  and  James 
Bell,  Vice  President;  Technical 
Services,  Smith  and  Loveless,  Inc., 
(a  leading  manufacturer  of  water  and 
wastewater  and  pumping  equip¬ 
ment).  Following  the  hearing, 
Senator  Bennett  toured  the  City  of 
Anaheim  Water  Services  Lenain 
Water  Filtration  Plant. 

One  of  the  major  topics  of  discussion 
during  the  hearing  was  the  need  for 
water  and  wastewater  companies  to 
obtain  assurances  from  their  electric 
power  providers  that  they  will  be 
considered  “uninterruptable”  or  prior¬ 
ity  customers  in  the  event  power 
supply  problems  occur.  Currently,  no 
legal  authority  exists  to  require  that 
power  utility  companies  consider 
water  and  wastewater  companies  as 
priority  customers.  Such  agree¬ 
ments  have  customarily  been 
negotiated  on  a  case-by-case  basis 
between  power  and  utility  compa¬ 
nies. 

Mr.  Jim  Ellisor,  Director  of  Informa¬ 
tion  Systems  for  the  Las  Vegas 
Valley  Water  District,  noted  in  his 
testimony  that  some  variability  exists 
in  water  systems’  reliance  on  elec¬ 
tricity,  depending  on  system  design. 
He  noted  that  some  systems  rely 
completely  on  gravity  and  require 
little  or  no  electricity  for  their  opera¬ 
tion,  including  some  large  systems. 

During  her  testimony,  EPA  Deputy 
Assistant  Administrator  Dana  Min¬ 
erva  noted  that  the  EPA  does  not 
consider  reliance  on  switching  to  the 
manual  mode  of  operation  as  the 
preferred  solution  to  Y2K  problems. 
Manpower  limitations  were  cited 
during  the  testimony  as  one  impedi¬ 


ment  to  a  company’s  ability  to  easily 
switch  to  the  manual  mode  of  opera¬ 
tion.  The  possibility  of  creating  some 
type  of  “reserve  force”  that  could  as¬ 
sist  companies  in  need  of  additional 
personnel  in  the  event  of  the  need  to 
default  to  manual  mode  was  dis¬ 
cussed.  It  was  concluded  that 
operation  of  water  and  wastewater 
plants  in  the  manual  mode  requires 
skilled  and  certified  operators.  Con¬ 
sequently,  a  pool  of  unskilled 
reservists  from  outside  of  the  water 
industry  would  probably  not  provide 
an  effective  solution  to  the  man¬ 
power  shortage  problem. 

It  should  also  be  noted  that  each 
water  and  wastewater  treatment 
system  requires  operators  to  pos¬ 
sess  a  body  of  knowledge  specific  to 
those  individual  systems.  Mr.  Bill 
Hetland,  General  Manager  of  the  El 
Dorado  Irrigation  District,  stated  that 
most  agencies  would  have  to  look  to 
their  own  internal  resources  to  solve 
the  Y2K  problem,  that  it  would  be 
unrealistic  to  think  that  a  pool  of  la¬ 
bor  would  be  available  to  assist  in 
Y2K.  He  also  stated  that  staffing 
would  become  an  issue  for  his 
agency  if  manual  operations  were 
required  for  an  extended  period  of 
time. 

Mr.  Hetland  stressed  the  importance 
of  providing  information  to  the  com¬ 
munity  about  the  problem.  He  also 
described  the  progress  his  agency 
had  made  and  said  such  information 
is  vital  to  community  preparedness. 
He  also  expressed  concern  about 
regulatory  compliance  and  the  liabil¬ 
ity  issue. 
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Deputy  Assistant  Administrator 
Minerva  testified  about  EPA’s  im¬ 
plementation  of  a  new  policy  aimed 
at  encouraging  Y2K  testing  in  the 
water  and  wastewater  industry.  This 
policy  waives  penalties  if  violations 
occur  during  Y2K  testing,  provided 
specific  conditions  are  met.  Deputy 
Assistant  Administrator  Minerva 
further  stated  that  testing  and 
preparation  would  be  taken  into  ac¬ 
count  if  Y2K-related  enforcement 
violations  occur  on  January  1,  2000 
or  other  “problem  dates.”  According 
to  Ms.  Minerva,  EPA  cannot  rule  out 
any  enforcement  pertaining  to  Y2K 
problems,  however  it  will  take  efforts 
to  resolve  the  problem  into  account. 

The  new  EPA  policy  is  limited  to 
testing-related  violations  disclosed  to 
EPA  by  February  1 ,  2000.  The  policy 
is  subject  to  conditions  which  include 
the  need  to  design  and  conduct  the 
tests  well  in  advance  of  the  dates  in 
question  and  to  correct  any  testing- 
related  violations  immediately  to  en¬ 
sure  the  protection  of  human  health 
and  the  environment. 

The  General  Accounting  Office,  at 
the  request  of  this  Committee,  is  cur¬ 
rently  preparing  a  survey  of  state 
regulatory  agencies  with  jurisdiction 
over  public  water  and  wastewater 
utility  companies.  This  survey  will 
determine  the  extent  to  which  state 
regulatory  agencies  are  assessing 
the  Y2K  readiness  of  public  water 
and  wastewater  utilities. 

In  July  1998,  Committee  staff  sur¬ 
veyed  20  water  and  20  wastewater 
companies  regarding  their  Y2K  pre¬ 
paredness.  About  25%  of  those 
contacted  responded  to  the  survey, 


despite  the  fact  that  a  confidentiality 
pledge  was  made  to  all  survey  re¬ 
cipients.  The  results  indicate  that  of 
the  1 1  companies  that  responded  to 
the  survey,  slightly  over  25%  stated 
that  it  was  unlikely  they  would  be 
Y2K  compliant  by  January  1,  2000. 
More  than  50%  of  the  respondents 
had  not  yet  completed  the  initial  as¬ 
sessment  phase,  and  36%  did  not 
have  contingency  plans  in  place. 
Of  the  64%  that  had  contingency 
plans  in  place,  the  contingency  con¬ 
sisted  of  either  switching  to  manual 
operations  or  utilizing  parent  com¬ 
pany  operations.  The  table  at  the 
end  of  this  section  displays  the  re¬ 
sults  of  the  Committee’s  survey. 

In  July  and  August  1998,  the  Ameri¬ 
can  Water  Works  Association 
(AWWA),  the  Association  of  Metro¬ 
politan  Water  Agencies  (AMWA), 
and  the  National  Association  of  Wa¬ 
ter  Companies  conducted  a  joint 
survey  of  their  memberships  re¬ 
garding  Y2K  readiness. 
Approximately  725  of  the  4000 
members  of  these  associations  re¬ 
sponded  to  this  survey. 

•  About  81%  of  the  respondents 
expect  to  complete  their  internal 
Y2K  work  on  time. 

•  About  89%  of  the  community 
public  water  systems  serving 
populations  ranging  from  100,000 
to  1  million  people  expect  to  have 
Y2K  compliance  work  completed 
on  time. 

•  About  87%  of  the  systems  serv¬ 
ing  between  10,001  and  100,000 
people  expect  to  complete  their 
work  on  time. 
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•  About  76%  of  the  systems  serv¬ 
ing  less  than  10,000  people 
expect  to  be  completed  on  time. 

•  Only  26%  of  the  respondents  re¬ 
ported  having  fully  assessed  the 
compliance  status  of  vital  busi¬ 
ness  partners  such  as  power  and 
telecommunications  service  pro¬ 
viders  and  vendors  upon  whom 
they  rely. 

•  About  83%  of  the  respondents 

reported  that  they  had  not  com¬ 
pleted  their  Y2K  contingency 

plans. 

j 

•  About  39%  of  the  respondents 
reported  that  they  expect  to 
spend  less  than  $10,000  on  their 
Y2K  programs. 

•  About  26%  expect  to  spend 

$10,000  to  $50,000  on  their  pro¬ 
grams. 

•  About  80%  expect  to  spend 

$50,000  to  $100,000. 

•  About  10%  expect  to  spend 

$100,000  to  $1  million. 

•  About  4%  expect  to  spend  over 
$1  million. 

In  June  1998,  the  Association  of 
Metropolitan  Sewerage  Agencies 
(AMSA)  conducted  a  survey  of  its 
202  members.  AMSA  is  a  coalition  of 
publicly  owned  wastewater  treatment 
agencies.  Its  member  agencies  are 
responsible  for  collectively  treating 
and  reclaiming  over  18  billion  gallons 
of  wastewater  each  day.  AMSA  re¬ 


ceived  76  responses  to  its  survey. 
Results  indicated  the  following: 

•  The  level  of  automation  within 
each  agency  averaged  54%.  (Not 
all  aspects  of  each  agency’s  op¬ 
eration  are  automated,  i.e.,  an 
agency  may  utilize  automated 
billing  but  its  operational  plant 
processes  may  be  manually  con¬ 
trolled.) 

Eighty-eight  percent  of  the  respon¬ 
dents  reported  that  they  currently 
utilized  some  form  of  Supervisory 
Control  and  Data  Acquisition  System 
.  (SCADA)  in  their  operations.  It 
should  be  noted  that  while  an 
agency  might  use  SCADA  in  one  as¬ 
pect  of  its  operation,  such  as 
monitoring  a  remote  pumping  sta¬ 
tion,  this  does  not  mean  that  its 
entire  system  is  automated.  These 
systems  are  pervasive  in  the  power 
and  water  and  wastewater  utility  in¬ 
dustries  and  typically  collect  and 
transmit  data  about  flow,  pressure, 
and  temperature.  Computers  can  be 
utilized  at  any  point  in  the  system 
where  measurements  are  made  re¬ 
garding  pressure,  water  quality, 
chemical  content,  treatment,  time,  or 
billing. 

•  Nearly  100%  of  the  respondents 
reported  that  they  use  computers 
for  process  control,  laboratory  re¬ 
search,  industrial  compliance, 
billing  systems,  and  other  ad¬ 
ministrative  purpose,  such  as 
finances,  inventory,  and  mainte¬ 
nance  management. 

•  Ninety  percent  of  the  respon¬ 
dents  have  developed  a  plan  to 
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assess  and  address  the  Y2K  is¬ 
sue. 

•  Forty-five  percent  of  the  respon¬ 
dents  reported  estimated  Y2K 
costs  ranging  from  $0  to 
$100,000.  Fifteen  percent  re¬ 
ported  estimated  costs  in  excess 
of  $1  million,  with  two  respon¬ 
dents  reporting  estimates  of  $15 
million.  Most  of  the  agencies  re¬ 
porting  costs  in  excess  of  $1 
million  were  relatively  large  sys¬ 
tems,  but  17  %  of  those  reporting 
costs  in  excess  of  $1  million  were 
agencies  which  served  under 
250,000  people.  Most  agencies 
estimated  Y2K  costs  between  0 
and  2  percent  of  their  operating 
costs. 

•  Approximately  95%  of  the  re¬ 
spondents  reported  they  had 
begun  to  implement  Y2K  solu¬ 
tions,  and  26%  reported  they 
were  complete  or  nearly  com¬ 
plete  in  their  Y2K  preparation. 

•  Approximately  55%  of  the  re¬ 
spondents  reported  having  a 
backup  plan  should  all  or  a  por¬ 
tion  of  their  systems  fail  as  a 
result  of  Y2K. 

Concerns 

With  very  few  exceptions,  the  ability 
of  the  water  utilities  to  supply  fresh, 
clean  drinking  water  and  to  effec¬ 
tively  treat  wastewater  is  linked 
directly  to  the  utilities’  ability  to  obtain 
a  continuous  and  reliable  source  of 
electric  power.  This  fact  under¬ 
scores  the  importance  of  the  topic  of 
this  Committee’s  hearing  on  June 


12,  regarding  the  Y2K  problem  and 
electric  power  utilities. 

While  some  water  and  wastewater 
utilities  can  generate  their  own  elec¬ 
tricity  in  the  event  of  a  power  outage, 
the  ability  to  do  so  for  an  extended 
period  of  time  would  depend  upon 
the  availability  of  a  steady  supply  of 
diesel  or  other  alternative  fuel  to 
power  the  utilities’  independent  gen¬ 
erators.  In  general,  the  larger  water 
and  wastewater  utilities  do  maintain 
the  ability  to  generate  their  own 
source  of  back-up  electricity,  but  the 
duration  for  which  this  can  be  done 
varies  widely  within  the  industry. 

There  is  no  interconnectivity  built  into 
the  water  distribution  system  as  with 
the  electric  power  grid.  Nevertheless, 
some  citizens  could  be  facing  inter¬ 
ruptions  of  water  utility  service  on 
January  1 ,  2000  if  water  utility  com¬ 
panies  do  not  adequately  address 
the  Y2K  problem. 

Water  industry  Y2K  issues  are 
broader  and  more  complex  than 
simply  whether  electric  power  will  be 
available  to  run  the  pumping  sta¬ 
tions.  For  example,  wastewater 
treatment  facilities  and  water  supply 
utilities  are  interrelated.  Upstream 
contamination  caused  by  a  malfunc¬ 
tioning  wastewater  treatment  plant 
would  have  a  direct  impact  on  a 
fresh  water  treatment  facility  located 
downstream. 

The  EPA  identified  six  major  areas  in 
water  and  wastewater  treatment  fa¬ 
cilities  where  embedded  computer 
chips  might  be  located.  These  are 
communications  infrastructure,  in¬ 
strumentation,  facilities  and  sup- 
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port,  materials  tracking,  production 
and  process,  and  process  controls. 
The  list  included  51  individual  de¬ 
vices  that  potentially  could  contain 
embedded  chip  technology. 

Of  primary  concern  in  the  water  and 
wastewater  industry  is  the  vulner¬ 
ability  of  sensitive  SCADA  systems 
utilized  in  automated  water  and 
wastewater  processes 

The  degree  of  automation  in  water 
and  wastewater  systems  varies 
widely  throughout  the  country,  de¬ 
pending  upon  both  the  age  and  size 
of  the  individual  systems.  Many 
older  systems  are  not  highly  com¬ 
puter  dependent. 

The  Committee  is  concerned  about 
the  inability  of  some  wastewater 
treatment  facilities  to  properly  oper¬ 
ate  in  the  event  of  power  outages  of 
even  moderate  duration.  Committee 
staff  reviewed  numerous  cases  in 
which  electrical  power  interruptions 
led  to  the  discharge  of  untreated 
wastewater  or  raw  sewage  into  rivers 
or  the  ocean.  Such  discharges  cur¬ 
rently  occur  on  a  sporadic  basis 
throughout  the  country  due  to  power 
outages  and  excessive  rainfall. 

As  is  true  in  all  other  aspects  of  the 
Y2K  problem,  the  water  and  waste- 
water  industry  is  also  vulnerable  to 
supply  chain  interruptions.  Water 
treatment  plants  in  particular  rely  on 
a  regular  supply  of  chlorine  and 
other  chemicals  that  are  required  in 
the  water  treatment  process.  Long¬ 
term  interruptions  in  the  means  of 
production  or  delivery  of  these  items 
due  to  other  Y2K  problems  would 
directly  impact  the  utilities’  ability  to 


deliver  their  services.  The  stockpil¬ 
ing  of  some  of  these  chemicals  prior 
to  the  Year  2000  has  been  proposed 
by  some  as  a  means  of  alleviating 
concerns  about  supply  chain  inter¬ 
ruptions.  However,  some  of  the 
chemicals  used  in  the  industry  rep¬ 
resent  a  public  health  hazard  if 
accidentally  discharged  into  the  envi¬ 
ronment.  The  risk  to  public  safety 
would  be  greatly  multiplied  if  some  of 
these  chemicals  were  stockpiled. 

Committee  staff  has  reviewed  nu¬ 
merous  recent  examples  of 
computer-related  or  computer- 
induced  failures  in  the  water  and 
wastewater  industry.  While  the  cases 
reviewed  are  not  believed  to  be  the 
result  of  Y2K  induced  problems,  they 
clearly  illustrate  the  sensitive  and 
important  role  which  computers  play 
in  the  water  and  wastewater  services 
area.  Numerous  water  or  wastewa¬ 
ter  companies  could  be  confronted 
by  similar  computer-related  failures 
on  January  1,  2000,  if  proper  steps 
are  not  taken  now  to  address  the 
Y2K  issue. 

Numerous  representatives  of  the 
water  and  wastewater  industry  of¬ 
fered  assurances  to  Committee  staff 
that  they  could  switch  their  opera¬ 
tions  to  the  manual  mode  in  the 
event  of  a  Y2K  disruption.  In  their 
response  to  the  AMSA  survey,  most 
wastewater  agencies  pointed  out 
that  switching  to  the  manual  mode 
would  present  little  if  any  problems 
since  many  automated  processes 
run  in  parallel  with  manual  instru¬ 
mentation  and  control.  Switching  to 
the  manual  mode  of  operation  may 
represent  a  viable  alternative  to 
computer-controlled  processes 
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under  ideal  conditions  and  in  a  con¬ 
trolled  environment.  However,  the 
conditions  that  might  require  transi¬ 
tion  to  a  manual  mode  of  operation 
are  likely  to  be  neither  controlled  nor 
ideal  in  the  case  of  Y2K. 

On  its  face  the  survey  data  cited 
here  appear  to  present  a  somewhat 
optimistic  picture  of  the  Y2K  readi¬ 
ness  of  the  water  and  wastewater 
industry.  However,  attention  must 
be  paid  to  the  fact  that  the  response 
rate  for  each  of  these  surveys  was 
relatively  low,  and  the  status  of  those 
agencies  that  did  not  respond  re¬ 
mains  largely  unknown. 


Analysis  of  the  July  1998  joint 
AMWA/NAWC/AWWA  July  1998 
survey  of  water  agencies  reveals 
that  14%  of  responding  companies 
serving  populations  over  100,000 
people  reported  that  they  would  not 
have  their  Y2K  compliance  work 
done  on  time.  The  exact  impact  that 
this  will  have  on  their  operations  is 
not  clear,  as  it  is  unknown  whether 
this  includes  any  of  their  mission- 
critical  systems.  Of  the  11  compa¬ 
nies  who  responded  to  the 
Committee’s  survey,  over  25%  indi¬ 
cated  that  they  did  not  expect  to  be 
Y2K  compliant  by  January  1,  2000. 
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HEALTHCARE 


OVERVIEW 


Healthcare  is  the  largest  single  i  n- 
dustry  in  the  United  States.  It  is  a 
giant  of  an  industry:  750,000  phys  i- 
cians,  5200  hospitals,  annual  expe  n- 
ditures  of  $1.5  trillion,  patient  utiliz  a- 
tion  census  of  3.8  million  daily  inp  a- 
tient  visits  and  20  million  daily  outp  a- 
tient  visits,  a  federal  Medicare  pro¬ 
gram  treating  38  million  seniors  at  an 
annual  cost  of  $300 
billion.  Additionally, 

Americans  consume  $90 
billion  worth  of 
medications  and  medical 
supplies  per  year.  But,  the 
most  important  statistic  is 
that  average  life 

expectancy  has  increased  from  age 
47  in  1900,  to  age  76  in  1998.  Today, 
70%  of  Americans  will  live  to  be  65, 
versus  20%  in  1910. 

Industry  Technical  Dependency 
The  increase  in  life  expectancy  is  the 
result  of  many  factors:  scientific,  ec  o- 
nomic,  public  education  and  a  host  of 
others.  But  an  underlying  cause  is 
technological  improvement  in  every 
aspect  of  healthcare.  These  medical 
technologies  are  susceptible  to  the 
Y2K  problem  in  three  ways. 

1.  Software 

•  Patient  data  systems  start  with 
admission  of  a  patient  to  a 
hospital  and  the  determination 
of  insurance  eligibility.  All 


subsequent  medical  treatment 
activities,  including  the  results 
of  all  diagnostic  tests,  are 
automatically  computer  r  e- 
corded.  This  insures  comm  u- 
nication  between  medical  sp  e- 
cialties,  the  carrying  out  of 
doctor's  orders,  and  the  ere  a- 
tion  of  an  audit  trail  to  protect 
the  patient  and  the  caregivers. 

Health  claim  billing  systems 
are  the  principal  means  of  f  i- 
nancing  the  huge  cost 
of  health  care. 
Consequently,  the  4 
million  daily  medicare 
health  claims 

amounting  to  over  $1 
billion  are  85%-98% 
computer  generated  and 
processed  in  an  Electronic 
Data  Interchange  (EDI)  mode 
between  provider  and  payor. 

•  Pharmaceutical  research, 

manufacturing  and  distribution 
systems  are  the  basis  for  pro¬ 
viding  the  patient  with  effective 
medications.  These  systems 
electronically  link  the  drug 
wholesaler  to  its  pharmaceut  i- 
cal  supplier  and  distribution 
outlets,  principally  retail  pha  r- 
macies  and  hospitals.  Finally , 
national  direct  mail  order  pr  e- 
scription  services  operate  as 
both  wholesaler  and  retailer. 

2.  Embedded  microprocessors 

•  Biomedical  devices  are  the 


Y2K  COULD  PUT  THE 
HEALTHCARE  INDUSTRY 
IN  INTENSIVE  CARE. 

Senator  Dodd 
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core  of  medical  technology, 
used  by  hundreds  of  millions  of 
units.  These  devices  occur  in 
every  kind  of  diagnostic  test 
equipment  (e.g.  blood  chemi  s- 
try  analyzers,  MRI,  X-ray  etc.) 
and  therapy  (e.g.  radiation) 
both  inpatient  and  outpatient. 
Additionally  there  is  a  heavy 
usage  (8  to  10  thousand  per 
hospital)  of  bio-medical  de¬ 
vices  in  in-patient  hospital 
care.  The  health  care  industry 
currently  relies  on  manufactu  r- 
ers’  Y2K  compliance  data  re¬ 
ports  to  determine  whether  the 
device  will  function  appropri¬ 
ately  when  the  date  changes. 
Many  device  manufacturers 
have  published  these  reports, 
indicating  Y2K  compliance 
status  by  model  and  serial 
number  of  each  device  they 
sell.  But  some  medical  device 
companies  still  have  not  i  n- 
formed  FDA  of  the  Y2K  risks. 
Committee  Vice  Chairman, 
Senator  Chris  Dodd ,  formally 
published  the  names  of  these 
companies  in  the  Congres¬ 
sional  Record  on  September 
23,  1998. 

Infrastructure  operations  use 
microprocessor  controls  in 
hospitals,  clinics  and  medical 
office  buildings  controlling 
heating,  ventilation,  security 
and  air-conditioning,  as  well  as 
power  and  water 


Process  control  and  analytical 
devices  are  critical  for  mana  g- 
ing  quality  control  in  laborat  o- 


ries,  manufacturing  flow  in 


factories,  and  automated  order 
activities  in  warehouses.  To  I- 
erances  in  most  of  its  product 
are  dependent  on  micropro  c- 
essors  to  achieve  them. 

3.  Electronic  interconnections  or  i  n 
terfaces 

These  are  the  most  prolific  and  p  o- 
tentially  the  most  likely  cause  of  Y2K 
failures.  For  example,  a  doctor  o  r- 
ders,  through  the  hospital  information 
system,  that  a  patient  be  given  an 
intravenous  feeding.  The  micropro  c- 
essor  controlling  the  patient's  infusion 
pump  is  connected  to  the  same  ho  s- 
pital  information  system.  The  infusion 
pump  records  the  patient’s  ID,  the 
quantity  of  the  intravenous  solution, 
and  the  date  and  time  of  the  trea  t- 
ment.  The  patients  could  be  in  jeo  p- 
ardy  If  the  hospital  system  and  the 
biomedical  devices  are  neither  Y2K 
compatible  nor  compliant. 

•  Business  partnerships  are 
electronically  linked  throughout 
the  industry.  Consequently,  a 
critical  part  of  Y2K  remediation 
is  to  determine  if  all  the  bus  i- 
ness  partners  of  a  healthcare 
entity  are  Y2K  compliant. 

MAJOR  INITIATIVES 

The  Special  Committee  on  the  Year 
2000  Technology  Problem  held  two 
hearings  dealing  with  healthcare  i  s- 
sues.  The  first  hearing  was  on  July 
23,  1998,  "The  Year  2000  Computer 
Problem:  Will  the  Health  Care  Indu  s- 
try  Be  Ready?"  The  second  hearing, 
dealing  with  Y2K  problems  of  general 
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business,  was  held  on  October  7, 
1998.  This  hearing  included  a  panel 
dedicated  to  the  pharmaceutical  in¬ 
dustry  with  witnesses  from  a  major 
pharmaceutical  company,  a  large 
wholesale  drug  company,  the  national 
association  representing  wholesale 
druggists,  and  an  independent  pha  r- 
macy. 

Industry  Y2K  Perspective  : 

The  Gartner  Group,  a  survey  research 
company,  issued  reports  stating  the 
healthcare  industry  lags  behind  others 
in  dealing  with  the  Y2K  problem  in 
managerial  attention,  technical  r  e- 
sources  available,  financial  resources 
committed  and  remediation  monito  r- 
ing. 

An  additional  problem  is  a  highly  d  e- 
centralized  system  is  used  to  process 
health  claim  payments,  the  underpi  n- 
ning  of  healthcare  financing.  It  is 
comprised  of  a  government-insurance 
industry  mechanism  that  electronically 
processes  nearly  4  million  Medicare 
claims  worth  over  $1  billion  daily  at 
over  70  separate  locations.  Third 
party  payors  for  private  health  claims 
utilize  a  similar  type  of  electronic 
claims  process. 


HEARING  SUMMARY 


The  following  issues  arose  during  the 
course  of  the  hearings. 

1 .  Biomedical  Devices 

These  devices  are  the  Trojan  horses 
in  the  health  care  industry's  compl  i- 


ance.  Users  are  often  unaware  or 
unknowledgeable  about  the  impact  of 
the  microprocessors  inside  these  s  o- 
phisticated  machines.  For  example, 
surgical  suite  machines  such  as  a 
$40,000  blood  gas  analyzer  could 
close  down  operating  rooms  if  they 
cannot  function  on  January  1,  2000. 
Every  major  medical  organization 
testified  that  they  were  experiencing 
significant  problems  with  biomedical 
device  manufacturers.  In  many  cases, 
manufacturers  were  unable  or  unwil  I- 
ing  to  comment  on  their  product’s 
ability  to  function  after  the  millennium 
change. 

•  After  2  letters  of  request,  only  500 
out  of  2700  companies  responded 
to  an  FDA  su  rvey. 

•  The  Committee  requested  the  FDA 
legal  counsel  to  respond  to  this  i  s- 
sue:  Does  the  FDA  have  legal 
authority  to  require  publication  of 
biomedical  devices?  The  FDA  r  e- 
sponded  that  it  does  not  have 
blanket  authority  to  require  all  d  e- 
vice  manufacturers  to  submit  Y2K 
compliance  reports.  But,  FDA  ind  i- 
cated  that  in  the  interest  of  patient 
safety,  manufacturers  should  i  n- 
form  the  FDA  of  device  problems 
and  corrections. 

•  The  Veterans  Health  Administr  a- 
tion  sent  letters  of  request  to  1600 
firms  for  information  on  purchased 
medical  devices.  After  three 
mailings,  233  firms  failed  to  re¬ 
spond. 

•  The  Health  Industry  Manufacturers 
Association  (HIMA)  initially  said 
that  it  preferred  for  each  man  u- 
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facturer  to  work  with  each  cus¬ 
tomer  rather  than  publicly  publish 
Y2K  compliance  data.  But  subs  e- 
quently,  HIMA  informed  the  Co  m- 
mittee  that  they  encouraged  their 
members  to  work  with  FDA  in  pr  o- 
viding  public  disclosure  of  Y2K 
compliance  data. 

•  The  Committee  called  upon  all 
manufacturers  of  biomedical  d  e- 
vices  to  publish  relevant  and  ac¬ 
curate  Y2K  data  for  their  machines 
in  a  central  repository,  the  FDA 
Internet  web  site. 

•  The  Committee  requested  that  the 
Food  and  Drug  Administration 
publish  a  list  of  biomedical  man  u- 
facturing  companies  that  have  not 
replied  to  FDA  requests  for  Y2K 
data  by  July  30, 1998. 

•  The  Committee  stated  if  the  bi  o- 
medical  manufacturers  were  u  n- 
willing  to  respond  voluntarily  to 
providing  data  that  can  save  p  a- 
tients’  lives,  the  Congress  will  e  n- 
act  legislation  promptly  making 
mandatory  the  publication  of  such 
data.  In  response,  device  man  u- 
facturers  began  providing  compl  i- 
ance  data  to  FDA  for  publication 
on  their  Internet  website. 

2.  Rural  and  Inner  City  Hospitals: 

Rural  and  inner  city  hospitals  have 
unique  Y2K  problems.  First,  because 
these  types  of  hospitals  tend  to  have 
limited  financing,  the  expensive  di  s- 
covery,  renovation,  and  testing  pro  c- 
ess  is  beyond  their  means.  Second, 
these  institutions  do  not  have  access 
to  the  highly  skilled  personnel  needed 


to  achieve  Y2K  compliance.  Third, 
these  hospitals  are  more  likely  to 
have  older  medical  equipment,  which 
may  be  disproportionately  subject  to 
Y2K  problems. 

•  The  Committee  requested  dire  c- 
tion  from  the  American  Hospital 
Association  (AHA)  on  handling  the 
rural-inner  city  hospital  Y2K  pro  b- 
lem.  The  AHA  stated  in  corre¬ 
spondence,  it  did  not  have  ad  e- 
quate  data  at  present  to  know  the 
ultimate  cost.  AHA  stated  that  a 
coalition  of  smaller  hospitals  is 
being  formed  to  share  Y2K  info  r- 
mation. 

•  The  Committee  stated  its  concern 
with  the  American  Medical  Ass  o- 
ciation  (AMA),  AHA  and  FDA 
about  the  need  of  a  contingency 
plan  for  all  hospitals.  Rural  and  i  n- 
ner  city  hospitals  in  particular 
need  a  fall  back  if  Y2K  compliance 
is  incomplete.  The  associations 
stated  the  Joint  Commission  on 
Accreditation  of  Health  Care  O  r- 
ganizations  (JCAHO),  the  hospital 
licensing  body,  already  requires 
disaster  and  contingency  plans  be 
in  place.  However,  the  Committee 
does  not  believe  JCAHO  requir  e- 
ments  adequately  anticipated  the 
extent  of  Y2K  problems.  Also 
JCAHO  only  reviews  hospitals  on 
a  triennial  basis. 

3.  Medical  Health  Claims  Payment  - 
Medicare 

i 

The  38  million  Medicare  recipients, 
5200  hospitals  and  780,000  phys  i- 
cians  depend  on  4  million  Medicare 
claims  for  $1  billion  in  daily  payment. 


Senate  Special  Committee  on  the  Year  2000  Technology  Problem 


46 


Investigating  The  Impact  of  the  Year  2000  Problem 


Any  significant  failure  or  delay  of 
Medicare  payments  would  have  a 
disastrous  cash  flow  effect  on  their 
employees,  suppliers  and  commun  i- 
ties.  The  Healthcare  Financing  Ad¬ 
ministration  (HCFA),  the  agency  r  e- 
sponsible  for  Medicare  disburs  e- 
ments,  gave  an  unsettling  report  on 
how  they  recently  discovered  30  mi  I- 
lion  more  lines  of  code  that  needed 
remediation. 

•  The  Committee  asked  the  HCFA 
Administrator  how  the  agency  was 
going  to  handle  a  workload  that 
had  grown  by  two  and  one  half 
times  since  a  July  7  briefing  to  the 
Committee  staff.  The  Administrator 
responded  that  the  remediation 
would  be  the  most  extensive  and 
expensive  in  the  history  of  Med  i- 
care  and  HCFA  was  taking  ex¬ 
traordinary  steps  to  meet  Y2K 
deadlines. 

•  The  Committee  asked  the  HCFA 
Administrator  the  current  level  of 
Y2K  compliance  of  the  external 
Medicare  payment  systems  mai  n- 
tained  by  contractors  -  the  core  of 
Medicare  payments.  The  most  r  e- 
cent  data  supplied  by  the  Office  of 
Management  and  Budget  (OMB) 
on  November  13,  1998  demon¬ 
strates  that  HCFA  has  tested  only 
8  out  of  108  external  systems. 
However,  the  HCFA  staff,  in  a  late 
November  meeting  with  the  Co  m- 
mittee,  indicated  substantial  pro  g- 
ress  since  the  OMB  report.  Med  i- 
care  renovation  was  to  be  co  m- 
pleted  by  December  31,  1998  and 
full  testing  in  the  spring  of  1999. 
None  of  these  systems  are  Y2K 
compliant  as  of  February  24, 1999. 


•  The  Blue  Cross/Blue  Shield 
(BC/BS)  representative  assured 
the  Committee  that  their  organiz  a- 
tion,  the  largest  Medicare  co  n- 
tractor,  would  be  ready  on  time  for 
the  December  deadline.  However, 
the  OMB  report  referenced  above, 
raises  questions  of  completion 
dates.  The  GAO  report  of  Febr  u- 
ary  24,  1999  indicates  Y2K 
problems  continue  at  all  BC/BS 
sites. 

•  The  Committee  raised  the  issue  of 
contingency  planning  for  Medicare 
payment  processing  in  the  event 
of  contractor  failure  in  meeting  the 
Y2K  deadlines.  The  HCFA  admi  n- 
istrator  and  BC/BS  were  requested 
to  tell  Congress  about  specific 
contingency  plans  when  they  are 
available.  At  present  only  general 
contractor  directions  for  planning 
are  available  in  lieu  of  specific 
plans. 

4.  The  Domino  Effect  of  Y2K  Fai  lure 

Perhaps  the  most  disturbing  Y2K 
revelation  to  the  Committee  was  the 
disclosure  of  the  domino  effect  of  Y2K 
failure.  It  can  occur  in  both  the  use  of 
biomedical  devices  and  in  Medicare 
payments. 

•  If  one  biomedical  device  malfun  c- 
tions,  it  can  potentially  shut  down 
an  operating  room.  Or  even  worse, 
one  device  can  pass  erroneous 
data  onto  other  devices  creating 
adverse  patient  conditions.  In 
other  words,  Y2K  mistakes  can  r  e- 
verberate  throughout  the  health 
care  system. 
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•  An  exhibit  displayed  at  the  hearing 
showed  the  pathway  for  Medicare 
hospital  claims,  98%  of  which  are 
processed  electronically.  Each 
claim  must  pass  through  a  series 
of  steps  beginning  with  patient  el  i- 
gibility  at  the  hospital  through  final 
Medicare  payments.  A  Y2K  pro  b- 
lem  at  any  step  in  the  process, 
could  either  delay  payment  or  fail 
to  remit  payment. 


ASSESSMENTS 


Based  on  Committee  hearings  in  July 
and  October,  subsequent  meetings 
with  healthcare  industry  personnel, 
and  the  October  17,  1998,  Gartner 
Group  Report,  healthcare  lags  in  its 
progress  towards  Y2K  preparedness. 
Assessment  is  broken  into  the  five 
portions  of  the  industry:  pharmaceut  i- 
cals,  large  hospitals  and  hospital 
chains,  health  claim  billing  systems, 
rural  and  inner  city  hospitals,  and 
doctors’  offices. 

Progress  Of  Healthcare  Industry 
Segments 

1 .  Pharmaceuticals 

The  Pharmaceutical  segment  of  the 
industry  appears  best  prepared  to 
meet  Y2K  challenges.  As  an  industry, 
pharmaceuticals  benefited  from  an 
earlier  start,  their  far-sightedness 
partially  due  to  a  long  time-to-market 
horizon  for  their  products.  Furthe  r- 
more,  top  management  recognized 
Y2K  as  a  business  risk  and  provided 
the  necessary  management  and  r  e- 
sources  to  address  it.  This  industry  is 


reported  to  be  selectively  stockpiling 
basic  medical  ingredients  that  could 
be  in  short  supply.  This  assures  that 
the  industry  will  be  capable  of  meeting 
strict  FDA  requirements  for  controlling 
batch  source  inputs  to  all  medications. 
However,  pharmaceutical  companies 
face  potential  problems. 

The  first  problem  is  the  dependency 
on  foreign  suppliers  and  subsidiaries. 
The  drug  industry  operates  manufa  c- 
turing  plants  worldwide  that  supply  the 
U.S.  market .  Some  suppliers  exist  in 
countries  where  basic  infrastructures 
lack  Y2K  preparedness.  A  further 
complication  is  the  high  concentration 
of  some  drug  production  in  foreign 
countries.  Denmark,  for  example, 
produces  70%  of  the  world’s  supply  of 
insulin.  Additionally  80%  of  the  basic 
ingredients  for  pharmaceutical  pro  d- 
ucts  produced  in  the  U.S.  come  from 
abroad. 

The  just-in-time  (JIT)  inventory  pro  c- 
ess  presents  another  problem.  JIT 
has  replaced  the  large  wholesale  drug 
warehouses  of  the  past  with  much 
more  efficient  Electronic  Data  Inte  r- 
change  (EDI)  ordering  and  billing 
processes.  JIT  requires  smaller  war  e- 
houses  and  saves  money.  If  adequate 
drug  inventories  are  to  be  maintained 
locally,  pharmaceutical  products  must 
be  delivered  promptly  from  a  man  u- 
facturer  to  a  wholesale  drug  company, 
then  to  retail  pharmacists  and  hosp  i- 
tals.  This  can  only  occur  if  the  tel  e- 
communication/transportation  infr  a- 
structure  functions. 

Finally,  pharmaceutical  companies 
have  a  myriad  of  business  partners, 
which  must  be  Y2K  compliant  to  be 


Senate  Special  Committee  on  the  Year  2000  Technology  Problem 


48 


Investigating  The  Impact  of  the  Year  2000  Problem 


effective.  Testing  all  of  these  ele  c- 
tronic  relationships  is  a  challenging 
assignment  for  the  industry. 

2.  Large  Hospitals 

While  not  as  prompt  as  pharmaceut  i- 
cals  in  responding  to  Y2K,  large  ho  s- 
pitals  are  dedicating  considerable 
resources  towards  fixing  the  problem. 
They  have  all  the  usual  Y2K  problems 
of  healthcare  plus  building  manag  e- 
ment  concerns.  They  have  to  provide 
water  and  power,  heating,  ventilating 
and  air  conditioning,  plus  maintain 
elevators  and  security  systems.  Ho  s- 
pitals  must  also  address  Y2K  pro  b- 
lems  in  biomedical  devices  and  pa¬ 
tient  data  systems.  All  of  the  above 
must  function  in  harmony  for  the  p  a- 
tient  to  be  adequately  protected.  Ho  s- 
pital  management  is  playing  a  catch 
up  game. 

As  of  October,  a  Gartner  Group  R  e- 
port  indicates  that  64%  of  hospitals  do 
not  plan  to  test  their  Y2K  software 
remediation  -  a  disquieting  fact  which 
hearings  in  1999  will  attempt  to  verify. 
Second,  many  hospitals  are  relying 
solely  on  producers  of  medical  d  e- 
vices  to  certify  their  Y2K  compliance. 
Based  on  known  inaccuracies  of  some 
producers’  compliance  certification, 
this  could  be  a  serious  mistake.  Third, 
Y2K  contingency  planning  is  in  its 
infancy  at  hospitals. 

3.  Health  Claim  Billing  Systems 

Automated  billing  is  the  underpinning 
of  the  healthcare  system.  This  $1.5 
trillion  industry  is  almost  totally  d  e- 
pendent  on  third  party  payors  (insu  r- 
ance  companies,  Medicare/Medicaid) 


that  finance  colossal  healthcare  e  x- 
penditures.  Progress  is  moving  very 
slowly. 

Medicare  (responsible  for  40%-50%  of 
all  payments),  has  zero  Y2K  compliant 
payment  programs,  according  to  the 
most  recent  GAO  report.  Medicaid, 
the  federal-state  health  care  payment 
system,  has  widely  varying  stages  of 
Y2K  remediation  progress  that  differs 
from  state  to  state.  A  General  A  c- 
counting  Office  report  dated  Nove  m- 
ber  6,  1998  indicates  that  only  17 
states  have  completed  the  renovation 
phase.  No  state  has  claimed  victory  in 
meeting  Y2K  goals. 

The  private  sector  has  also  experi¬ 
enced  difficulties.  In  a  recent  public  a- 
tion  of  Securities  Exchange  Commi  s- 
sion  (SEC)  10Q  financial  reports,  one 
of  the  largest  private  insurers  recently 
set  aside  nearly  $200  million  to  ren  o- 
vate  its  Y2K  health  care  billing  sy  s- 
tems.  This  indicates  that  significantly 
more  Y2K  remediation  is  r  equired. 

4.  Rural  and  Inner  City  Hospitals 

Rural  and  inner  city  hospitals  depend 
on  older  equipment  much  more  than 
large  well-endowed  hospitals  do.  On 
the  plus  side,  low  tech  equipment  may 
not  have  any  Y2K  exposure.  On  the 
negative,  older  versions  of  bill  pa  y- 
ment  software  are  more  likely  to  be 
non-compliant.  The  concern  for  rural 
and  inner  city  hospitals  stems  from 
their  lack  of  resources  to  prepare  or 
test  for  Y2K  problems.  Additionally,  it 
is  unclear  how  aware  rural  and  inner 
city  hospitals  are  of  Y2K  problems. 

5.  Doctors'  Offices 
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Because  the  nation’s  nearly  800,000 
doctors  work  out  of  thousands  of 
separate  offices,  detailed  data  on  the 
extent  of  the  Y2K  problem  in  this  area 
is  unavailable.  (Gartner  Group  R  e- 
ports  are  uncertain  on  the  status  of 
this  healthcare  area.)  Offices  have  all 
the  Y2K  problems  similar  to  hospitals 
on  a  smaller  scale  but  without  the 
comparable  access  to  technical  and 
financial  resources.  Since  diagnostic 
testing  depends  upon  biomedical 
devices,  potential  problems  may  exist. 
Patient  data  systems  are  not  widely 
used  in  doctors'  offices  today,  but 
electronic  health  claims  billing  sys¬ 
tems  are  nearly  universal  for  Med  i- 
care.  If  doctors  have  to  return  to 
paper  billing  because  of  Y2K  failures, 
insurance  companies  and  Medicare 
would  be  hard  pressed  to  accomm  o- 
date  the  resulting  volume  of  health 
claims. 


CONCERNS 


There  are  substantial  indications  that 
in  some  healthcare  settings ,  insuffi¬ 
cient  attention  is  being  paid  to  Y2K 
issues.  The  October  17, 1998  Gartner 
Group  Report  paints  a  dismal  picture 
of  healthcare  industry  preparation  for 
Y2K.  Top  management  needs  to  e  n- 
gage  this  problem  as  a  group,  pe  r- 
haps  by  formalizing  compliance  pr  o- 
grams  through  governing  bodies  or 
industry  groups. 

Based  on  a  1996  National  Institutes  of 
Health  Report,  nearly  40  million 
Americans  are  chronically  ill  or  phys  i- 
cally  impaired.  Maintenance  of  ad  e- 
quate  drug  inventories  can  be  a  life 


and  death  matter  for  patients  depen  d- 
ent  on  drugs  for  survival,  such  as 
insulin  for  10  million  diabetics.  Since 
some  of  these  life  saving  drugs  have 
a  short  shelf  life,  how  will  the 
healthcare  system  be  structured  to 
ensure  availability  of  life  dependent 
medications? 

The  Committee  recognizes  that  med  i- 
cal  malpractice  insurance  is  the 
means  by  which  both  hospitals  and 
medical  doctors  protect  themselves 
against  substantial  loss.  The  insu  r- 
ance  industry  has  already  demo  n- 
strated  an  unwillingness  to  subject 
itself  to  Y2K  liability.  But  hospitals 
and  medical  practitioners  cannot 
function  without  liability  insurance. 

The  Committee  is  also  concerned  that 
Y2K  prepared  hospitals  may  not  fo  I- 
low  proper  documentation  of  remedi  a- 
tion  efforts.  Compounding  the  pro  b- 
lem,  due  diligence  standards  in  this 
area  have  not  been  set. 

The  healthcare  industry  is  faced  with 
increased  costs  of  Y2K  remediation  in 
1999  and  the  possibility  of  extensive 
litigation  after  January  2000.  How  can 
costs  affecting  patient  care  services 
be  controlled? 

Excess  supplies  of  non-compliant 
medical  equipment  will  be  available 
prior  to,  and  after  January  2000  due 
to  replacements  with  compliant  sy  s- 
tems. 

How  will  patient  care  be  protected 
when  this  excess  equipment  is  di  s- 
posed  of  either  domestically  or  inte  r- 
nationally? 

Healthcare  managers  are  currently 
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considering  contingency  planning 
programs.  What  is  the  optimal  use  of 
this  approach  in  protecting  patient 
care  considering  the  multiple  risks 
that  can  occur  in  any  single  facility? 

Healthcare  systems  are  trying  to  r  e- 
duce  Y2K  exposure  by  excluding 
high-risk  business  partners  from  f  u- 
ture  deals.  The  cumulative  impact  of 
this  practice  in  healthcare  and  other 
industries  could  negatively  impact 
smaller  firms  irrespective  of  their 
competence  or  cost  competitiveness. 
What  can  be  done  to  insure  that  a 
"flight  to  quality"  will  include  Y2K 
compliant  smaller  firms? 

Rural  and  inner  city  hospitals  could  be 
endangered  as  a  result  of  Y2K  issues 
cited  above.  In  many  communities 
they  are  the  center  of  health  activities 
because  of  the  low-income  status  of 
their  patients.  Furthermore,  in  rural 
communities  these  hospitals  are  fr  e- 
quently  the  largest  employer.  What 
public  policy  actions  need  to  be  taken 
promptly  before  the  window  of  oppo  r- 
tunity  closes  on  solutions  prior  to  the 
Year  2000? 

How  do  the  healthcare  payment  o  r- 
ganizations  (Health  insurance  comp  a- 
nies  and  Medicare/Medicaid)  plan  to 
function  if  their  own  payment  systems 
are  not  working  or  their  customers 
(hospitals  and  doctors'  offices)  cannot 
produce  EDI  health  claims? 

The  volume  of  electronic  interfaces 
(paths)  between  biomedical  devices 
and  patient  data  and  billing  systems 


within  hospitals  is  staggering.  How  will 
all  the  paths  be  tested  adequately  for 
patient  safety?  What  testing  sta  n- 
dards  are  being  employed  to  ensure 
the  results  will  protect  patient  safety 
and  financial  accuracy? 

Contingency  planning  includes  di  s- 
aster  recovery  plans.  Will  contingency 
planners  accomplish  their  work  soon 
enough  to  be  of  practical  assistance 
to  the  continuity  of  operations  for  p  a- 
tient  safety  and  proper  medical  fun  c- 
tions? 

Several  of  the  national  associations 
that  represent  the  health  care  industry 
were  impressive  in  their  assistance  to 
the  Committee  and  the  country.  They 
helped  the  Committee  explain  the 
extent  and  depth  of  Y2K  compliance 
issues  in  their  industry.  It  is  obvious 
from  the  hearing  however  that  no 
single  organization  or  groupings  of 
healthcare  organization,  are  working 
together  to  assure  the  American  pu  b- 
lic  that  the  major  issues  are  being 
addressed  adequately.  Can  this  i  n- 
dustry  unify  quickly  enough  to  insure 
that  healthcare  will  become  Y2K  co  m- 
pliant  before  the  Year  2000? 

Testing  of  renovated  biomedical  d  e- 
vices,  patient  data  systems  and 
healthcare  billing  systems  is  in  its 
early  stages.  The  credibility  of  the  test 
results  is  dependent  on  the  quality  of 
the  testing  criteria  and  processes.  The 
Committee  has  not  seen  any  data  or 
discussion  dealing  with  this  ultimate 
measure  of  Y2K  compliance. 
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TELECOMMUNICATIONS 


OVERVIEW 


The  telecommunications  industry  is 
not  immune  from  the  Y2K  threat. 
Y2K-related  problems  in  telecomm  u- 
nications  could  have  serious  cons  e- 
quences  for  both  national  and  ec  o- 
nomic  security.  One-third  of  all  ele  c- 
tric  power  controls,  the  nation’s  f  i- 
nancial  transactions  and  over  90%  of 
defense  communications  rely  on  the 
smooth  functioning  of  public  tel  e- 
communications.  Telecommunic  a- 
tions  also  make  possible  the  remote 
control  of  pipelines  and  transporta¬ 
tion  systems  like  air  traffic  control. 

The  99.9%  availability  of  teleco  m- 
munications  in  the  U.S.  can  make  it 
easy  to  forget  how  much  we  depend 
upon  this  critical 
infrastructure. 1 
However,  the  failure  of 
AT&T’s  frame  relay 
system  in  April  1998 
and  the  loss  of 
PanAmSat’s  Galaxy  IV 
satellite  in  May  1998 
remind  us  just  how  much  we  take 
telecommunications  for  granted. 
When  AT&T’s  nationwide  frame  re¬ 
lay  system  for  data  transmission 
crashed,  one  bank  lost  over  1000 
ATM  sites  and  a  national  retailer  e  x- 
perienced  problems  in  over  2300 
stores.  When  Galaxy  IV  disco  n- 
nected  40  million  people  from  their 
pagers,  the  effect  was  felt  strongly 
throughout  the  economy,  including 
healthcare  which  could  not  page 


The 

TELECOMMUNICA  TIONS 
INDUSTRY  IS  NOT 
IMMUNE  FROM  THE  Y2K 
THREAT. 


critical  personnel.  While  these  fail¬ 
ures  were  not  Y2K  related,  some 
think  they  are  indicative  of  the  types 
of  inconveniences  that  may  result 
from  the  millennium  rollover. 

Our  critical  dependence  upon  co  m- 
munications  certainly  suggested  an 
industry  wide  response.  However, 
fears  of  competition  and  liability  pr  e- 
vented  a  formal  coordinated  indu  s- 
try-wide  approach  until  late  in  1998. 

Telecommunications  used  to  mean 
switched  voice  communications. 
However,  the  synthesis  of  computers 
and  telecommunications  has  broa  d- 
ened  the  way  in  which  we  think 
about  telecommunications.  The 
public  switched  network  (PSN)  can 
be  defined  as  any  switching  system 
or  voice,  data,  or  video  transmission 
system  that  is  used  to 
provide  communication 
services  to  the  public 
(e.g.,  public  switched 
networks,  pu  blic  data 
networks,  private  line 
services,  wireless 
services,  wireless 
systems,  and  signaling  networks). 2 
Many  layers  of  hardware  and  soft¬ 
ware  enable  the  seamless  commun  i- 
cations,  which  allow  us  to  make 
phone  calls,  surf  the  web,  and  tran  s- 
act  business. 

The  PSN  can  be  divided  into  three 
components: 

•  PSN  elements 
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•  support  systems  (operations, 
administrative  and  maintenance 
systems  of  the  service  provi  ders) 

•  customer  premise  equipment 

Public  Switched  Network  El  e- 
ments 

Public  switched  network  elements 
include  many  different 
devices  (any  one  of 
which  can  have  Y2K 
problems)  that  connect 
calls  between 

networks.  Switches, 

the  most  common 
telephone  equipment, 
establish  connections 
between  two  telephones  when  a  call 
is  made,  with  multiple  switches  r  e- 
quired  for  long  distance  calls. 
Switches  record  the  starting  and 
ending  times  of  a  call,  including  the 
day  and  the  year  (which  is  necessary 
for  calls  that  cross  time  zones).  If 
some  of  the  switches  used  in  placing 
a  call  are  Y2K  compliant  and  others 
are  not,  or  if  the  renovations  are  not 
performed  in  a  consistent  way  for  the 
different  types  of  switches  made  by 
different  manufacturers,  the  systems 
may  not  be  able  to  work  together. 

Support  Systems 

In  testimony  before  the  Committee 
Dr.  Judith  List,  Vice  President- 
Integrated  Technology  Solutions  at 
Bellcore,  explained  that  there  is  little 
date  sensitive  information  in  the  fu  n- 
damental  call  processing  or  data 
routing  capabilities  of  networks. 
"Where  we  do  see  date  sensitive  i  n- 
formation  is  in  the  operations,  a  d- 
ministration,  and  maintenance  fun  c- 
tions  of  networks,"  she  said.  Exa  m- 


ples  of  these  types  of  functions  i  n- 
clude  billing,  provisioning  of  services, 
network  surveillance  and  maint  e- 
nance,  and  other  network  manag  e- 
ment  and  administration  functions. 

The  disruption  of  a  carrier’s  oper  a- 
tions,  administration,  and  maint  e- 
nance  functions  could  cause  some 
confusion  for 

consumers  with  inacc  u- 
rate  billing  and  delays 
in  the  service  requests. 
There  is  a  concern  that 
a  buildup  of  errors 
could  eventually  begin 
to  degrade  service. 3 

According  to  a  report  from  a  high 
level  federal  advisory  committee  r  e¬ 
leased  September  10,  1998,  Y2K 
problems  could  impact  telecommun  i- 
cations  in  the  following  ways: 

•  Platform  operation  (hardware). 

Hardware  clocks  may  not  reco  g- 
nize  the  year  2000. 

•  Operating  system  functionality. 
Date  functions  may  return  the 
wrong  year  to  applications 

•  Scheduling  of  events.  Errors  in 
calendar  dates  can  prevent 
scheduled  events  (e.g.,  report 
updates,  testing,  designing,  pro¬ 
visioning,  or  billing)  from  running 
and  can  result  in  incipient  fail¬ 
ures. 

•  Historical  data.  Historical  data 
may  not  be  available  from  1999, 
or  1999  may  be  re-ordered,  with 
events  occurring  in  1999  s  e- 
quenced  after  2000. 

•  Sorting  and  searching  algo¬ 
rithms.  Dates  after  1999  will  be 
ordered  before  1999;  searching 
algorithms  intended  to  include 


Getting  a  basic  dia  I- 
tone  at  midnight  on 
January  1,  2000  is 
less  likely  to  be  a 
problem  than  disrup¬ 
tions  in  billing... 
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dates  in  2000  (e.g.,  “Where  date 
>  1997”)  will  exclude  them  in¬ 
stead. 

•  Password  expiration.  All  pass¬ 
words  may  expire  (which  would 
prevent  authorized  users  from 
performing  legitimate  functions), 
or  they  may  never  expire  (which 
could  diminish  the  protection  o  f- 
fered  by  password  aging). 4 

Customer  Premise  Equipment 

Customer  premise  equipment  (CPE) 
is  also  vulnerable  to  Y2K  problems. 
CPE  includes: 

•  Private  branch  exchange 
equipment  (PBX) 

•  telephone  equipment 

•  cellular  phones 

•  fax  machines 

•  private  data  networks 

•  public  service  answering  points 

Many  small  and  medium  sized  bus  i- 
nesses  may  not  be  aware  that  their 
privately  owned  communications 
equipment  may  fail  because  of  Y2K 
problems.  If  businesses  do  not  take 
a  proactive  approach  by  contacting 
vendors  and  obtaining  the  manufa  c- 
turer’s  compliance  information,  they 
could  have  difficulty  maintaining 
normal  business  functions  due  to  the 
failure  of  their  own  communications 
equipment.  The  good  news  is  CPE 
will  not  cause  disruptions  in  the  pu  b- 
lic  network.  However  the  economic 
impact  on  businesses  with  failed 
telecommunications  systems  may  be 
equally  as  damaging. 

According  to  the  Gartner  Group, 
networking  equipment  produced  b  e- 


fore  1996  has  only  a  50%  chance  of 
transitioning  to  the  year  2000  without 
needing  to  be  upgraded  or  replaced. 
Gartner  also  cautioned  that  local 
area  networks  (LANs)  can  be  i  m- 
pacted  by  Y2K  in  a  number  of  diffe  r- 
ent  ways  including  total  failure  and 
denying  management  access. 5  In 
view  of  their  projection  that  20%  of 
the  web  servers  installed  prior  to 
1997  could  fail  to  function  properly 
through  January  2000,  the  Gartner 
Group  also  warned  disruptions  might 
ultimately  deny  5  percent  of  Internet 
user  connectivity.  Gartner  is  also 
projecting  that  90%  of  web  users 
could  experience  delays.  In  addition, 
30%  may  find  sites  unreac  hable. 

Competition  for  resources  in  January 
2000  may  make  it  difficult  for  small 
and  medium-sized  business  to  s  e- 
cure  help.  It  is  imperative  that  bus  i- 
nesses  and  other  organizations 
make  communications  a  priority  now. 


Y2K  INITIATIVES  IN 
TELECOMMUNICATIONS 


Numerous  Y2K  initiatives  are  cu  r- 
rently  underway  in  the  telecommun  i- 
cations  industry,  including  strong  e  f- 
forts  by  the  Federal  Communications 
Commission  (FCC),  the  Network  R  e- 
liability  and  Interoperability  Council 
(NRIC),  the  Telco  2000  Forum  and 
Alliance  for  Telecommunications  I  n- 
dustry  Solutions  (ATIS),  the  National 
Communications  Systems  (NCS), 
and  the  President’s  National  Security 
Telecommunications  Advisory 

Committee  (NSTAC). 
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The  FCC 

Since  1934,  the  FCC  has  regulated 
interstate  and  international  comm  u- 
nications,  including  radio,  television, 
wire,  satellite  and  cable.  In  July 
1997,  the  NRIC,  the  FCC’s  federal 
advisory  committee  presented  its 
findings  and  recommendations  on 
the  implementation  of  the  Teleco  m- 
munications  Act  of  1996  in  a  report 
entitled  Network  Interoperability:  The 
Kev  to  Competition .  The  report  ob¬ 
served  that  “interconnectors  must 
ensure  that  their  year  2000  conve  r- 
sion  efforts  are  compatible.”  6  How¬ 
ever,  NRIC  made  no  specific  rec¬ 
ommendations  for  an  industry-wide 
response  to  the  problem. 

In  the  summer  of  1997,  the  Y2K 
problem  was  viewed  as  a  due  dil  i- 
gence  effort,  which  only  needed  to 
be  addressed  by  individual  comp  a- 
nies.  There  did  not  appear  to  be  a 
role  for  the  FCC  or  a  need  for  a  c  o- 
ordinated  industry-wide  response  the 
Y2K  problem.  The  lack  of  strong  n  a- 
tional  leadership  made  it  very  easy 
to  defer  the  problem.  Commissioner 
Michael  Powell  was  appointed  to  the 
FCC  in  December  1997.  In  his  role 
as  the  FCC  Defense  Commissioner, 
he  began  an  aggressive  Y2K  awar  e- 
ness  outreach  to  the  industry. 

“Despite  carriers’  best  efforts  to  co  r- 
rect  Y2K  problems  and  carrier  as¬ 
surances  that  telephone  service  will 
be  available  on  January  1,  2000,  the 
FCC,  most  industry  analysts,  and 
even  some  carrier  representatives 
conceded  that  some  failures  are  still 
likely  to  occur.”7  However,  the  types 
of  problems  that  could  result  remain 
unclear. 


In  March  1998,  Senator  Jon  Kyi 
wrote  to  the  Chairman  of  the  FCC 
and  expressed  his  concern  about 
the  absence  of  an  industry-wide 
telecommunications  effort  to  test 
for  interoperability,  or  an  accurate 
assessment  of  the  industry  of 
how  Y2K  may  affect  the  Public 
Network  (PN).8  Senator  Kyi  also 
suggested  that  if  NRIC  was 
tasked  by  the  FCC ,  it  could  pro¬ 
duce  an  accurate  and  much 
needed  assessment  of  how  the 
Y2K  problem  could  affect  the  PN. 

This  assessment  could  look  b  e- 
yond  the  traditional  switched  ne  t- 
work  and  consider  other  comm  u- 
nication  technologies  including 
cellular  and  satellite  among  oth¬ 
ers.  Such  a  report  could  well 
provide  the  basis  for  building 
contingency  plans  to  ensure  that 
communications  vital  to  national 
and  economic  security  could  be 
maintained. 

On  April  28,  1998,  before  the  Senate 
Commerce  Committee,  FCC  Chai  r- 
man  William  Kennard  testified  that 
the  NRIC  would  be  asked  to  exa  m- 
ine  the  implications  of  Y2K  on  co  m- 
munications.  On  July  30th,  a  day 
before  presenting  testimony  to  the 
Y2K  •  Committee,  the  FCC  a  n- 
nounced  that  Michael  Armstrong, 
CEO  of  AT&T,  would  chair  the  newly 
re-chartered  federal  advisory  group 
to  look  at  Y2K.  The  NRIC  met  to 
propose  a  comprehensive  plan  e  x- 
amining  three  main  a  reas: 

•  Y2K  Impact  on  the  Ne  tworks 

•  Y2K  Impact  on  Customer  Pre  m- 
ise  Equipment 

•  Network  Reliability. 


Senate  Special  Committee  on  the  Year  2000  Technology  Problem 


56 


Investigating  The  Impact  of  the  Year  2000  P  roblem 


Telco  2000  Forum 

One  of  the  earliest  and  best- 
organized  efforts  to  test  for 
interoperability  in  the  PN  was  the 
Telco  Year  2000  Forum.  Collectively 
representing  about  145  million  a  c- 
cess  lines,  The  Forum  diligently 
sought  to  overcome  the  complexity 
of  sharing  information  and  antitrust 
concerns  in  the  highly  charged  legal 
atmosphere  of  1997  and  1998.  The 
Forum,  a  voluntary  group  of  eight 
local  exchange  carriers,  was  the  first 
telecommunications  initiative  to  b  e- 
gin  identifying  possible  problems  of 
interoperability.  The  Forum  me  ru¬ 
bers  include: 

•  Ameritech  Corporation 

•  Bell  Atlantic 

•  BellSouth 

•  Cincinnati  Bell 

•  GTE 

•  SBC 

•  Southern  New  England  Tel  e- 
communications  Corporation 

•  US  West 

In  an  effort  to  reduce  the  possible 
risk  of  network  failures,  the  Forum 
began  testing  in  July  1998  and  co  m- 
pleted  testing  in  January  1999.  The 
Forum  completed  1700  tests  and 
found  only  seven  problem  areas,  five 
of  which  have  already  been  rem  e- 
died.  The  Forum  tested  16  separate 
configurations  of  network  elements 
and  data  transactions  and  40  unique 
network  management  configurations. 
These  test  configurations  were  made 
up  of  82  commonly  used  teleco  m- 
munications  products  from  21  su  p- 
pliers.  The  Forum  specifically  ex¬ 


amined  the  impact  of  Y2K  fixes  and 
interoperability  on: 

•  Emergency  services 

•  Basic,  enhanced,  and  intelligent 
services 

•  Network  management  systems 

•  Data  networks 

The  tests  were  concluded  succes  s- 
fully  at  the  end  of  1998.  A  report  is 
expected  by  the  end  of  January 

1999.  The  early  initiative  of  the  F  o- 
rum  and  its  commitment  to  business 
continuity  will  play  a  major  role  in  a  I- 
leviating  public  co  ncern. 

According  to  expert  testimony  from 
Gerry  Roth  of  GTE,  “  Despite  the  fact 
that  this  network  cannot  be  100  pe  r- 
cent  tested  in  advance  of  the  Year 

2000,  we  believe  our  individual  and 
collective  actions  in  Year  2000  re¬ 
mediation  and  subsequent  test  and 
validation  provide  a  basis  for  conti  n- 
ued  confidence  that  the  telephone 
and  data  networks  will  continue  to 
operate  and  provide  the  outstanding 
services  we  have  come  to  expect.  ”9 

Alliance  for  Telecommunications 
Industry  Solutions 

On  January  4,  1999  ATIS  began 
scheduled  internetwork  inter¬ 
operability  testing  to  evaluate  the 
impact  of  the  Year  2000  date  change 
on  the  PSN.  Companies  participa  t- 
ing  in  the  testing  include  Ameritech, 
US  West,  GTE,  AT&T  and  Sprint,  as 
well  as  six  wireless  service  providers 
(Aerial  Communications,  AirTouch, 
AT&T  Wireless,  Bell  Atlantic  Mobile, 
BellSouth  and  SBC). 
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Planning  and  implementation  of  the 
testing  procedures  began  several 
months  ago.  Efforts  included  ident  i- 
fication  of  the  test's  scope,  gener  a- 
tion  of  appropriate  test  scripts,  and 
obtaining  participants  to  donate  lab 
equipment  and  the  appropriate  re¬ 
sources.  Interconnected  services  to 
be  tested  on  the  network  include  toll 
free  services;  Local  Number  Port¬ 
ability  (LNP);  the  Government  Erne  r- 
gency  Telecommunications  System 
(GETS);  and  wireline-to-wireless  and 
wireless-to-wireline  interconne  ctions. 

All  testing  is  being  conducted  off¬ 
line  to  ensure  no  disruption  of  exis  t- 
ing  services  to  the  PN.  This  testing 
effort  will  be  accomplished  by  rolling 
forward  the  dates  of  the  interco  n- 
nected  switches  in  a  laboratory  env  i- 
ronment  to  simulate  the  following 
date  rollovers: 

•  December  31,  1999  to  January  1, 
2000 

•  February  28  to  February  29,  2000 

•  February  29  to  March  1 ,  2000 

•  December  31 ,  2000  to  January  1 , 
2001 

During  each  simulated  rollover,  the 
signaling  network  will  be  monitored 
to  ensure  that  the  PN  responds  in  a 
satisfactory  manner. 

ATIS  will  be  testing  the  internet¬ 
working  aspects  of  the  PN.  ATIS 
has  designed  special  test  scripts  that 
will  focus  on  time  -  critical  network 
events  on  31  December  -  1  January 
to  model  and  monitor  potential  ne  t- 
work  congestion  and  the  transmi  s- 
sion  of  voice  and  data  from  local  e  x- 
change  to  inter-exchange  carriers, 
“800”  number  access,  and  network 


management  and  control.  Year 
2000  testing  will  continue  through 
February  12,  with  results  made  pu  b- 
licly  available  to  interested  parties  on 
April  14,  1999. 


ASSESSMENT 


During  1998,  there  were  no  publicly 
released  comprehensive  studies  or 
assessments  of  how  Y2K  could  a  f- 
fect  the  telecommunications  infra¬ 
structure.  However,  it  is  generally 
believed  that  Y2K  will  not  cause 
prolonged  disruptions.  The  absence 
of  any  comprehensive  assessment 
sparked  considerable  uneasiness 
among  business  sectors  and  the 
public  in  general.  The  general  view 
was  that  companies  were  working 
hard  to  address  Y2K,  but  little  factual 
information  was  available. 

On  January  14,  1999,  NRIC  released 
its  preliminary  assessments  demo  n- 
strating  that  the  telecommunications 
industry  was  meeting  the  Y2K  cha  I- 
lenge.  NRIC  estimates  that  the  m  a- 
jority  of  the  industry  is  on  target  to 
meet  its  self-imposed  goal  of  Y2K 
readiness  by  June  1999.  According 
to  the  FCC  Advisory  Committee,  I  o- 
cal,  exchange  carrier,  long  distance 
carrier  and  small  telephones  comp  a- 
nies  all  seemed  to  be  making  good 
progress.  However,  small  phone 
companies  tend  to  lag  approximately 
10-15%  behind  larger  local  ex¬ 
change  carriers  in  fixing  Y2K  pro  b- 
lems.  The  local  exchange  comp  a- 
nies  participating  in  the  NRIC  (a  p- 
proximately  99%  of  all  the  switched 
access  lines  in  the  U.S.)  were  pro¬ 
jecting  to  have  completed  76%  of 
their  Y2K  renovations  by  Dece  m- 
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ber  1998.  The  three  major  long  di  s- 
tance  carriers  participating  in  NRIC-- 
AT&T,  MClWorldcom  and  Sprint- 
represent  82%  of  the  market  reve¬ 
nues.  These  companies  are  pro¬ 
jected  to  have  reached  81%  readi¬ 
ness  by  December  1998.  The  NRIC 
assessment  is  an  important  first 
step. 

Rural  Telephone  Companies 

The  readiness  of  the  1271  small 
companies,  who  provide  about  1  %  of 
the  access  lines  in  the  U.S.,  remains 
unclear.  Some  people  within  the  ru¬ 
ral  telephone  companies,  contrary  to 
popular  press,  pride  themselves  on 
maintaining  the  latest  equipment. 
Some  rural  companies,  for  example, 
claim  to  have  been  the  first  to  offer 
digital  switching.  Approximately  75% 
of  the  rural  market  is  already  sche  d- 
uled  for  Y2K  upgrades.  Only  2%  are 
not  expected  to  be  Y2K  ready. 10 

Satellite  Communications 

Ramu  Potarazu,  Chief  Information 
Officer  (CIO),  INTELSAT,  testified 
before  the  Committee  that  commun  i- 
cations  satellites  do  not  reference  a 
time  and  a  date;  rather,  a  satellite 
references  what  is  commonly  r  e- 
ferred  to  as  “satellite  local  time,”  that 
is  a  reference  to  the  sun.  When 
there  is  a  technological  reference  to 
the  sun,  there  usually  is  no  reference 
to  a  specific  year.  INTELSAT’S  own 
analysis  found  that  the  primary 
problems  reside  in  ground  systems 
that  fly,  command  and  control,  and 
monitor  satellites.11 

INTELSAT  expressed  concern  about 
ground  station  users  who  have  co  m- 


puter  systems  that  may  not  have 
been  upgraded  over  the  last  10  or  15 
years.  According  to  INTELSAT, 
these  users  may  have  a  more  limited 
knowledge  of  computers  because 
they  only  repair  the  computer  system 
when  it  breaks.  They  may  or  may 
not  be  fully  aware  of  the  Y2K  issue, 
and  they  may  or  may  not  be  rem  e- 
diating  any  Y2K  issues.  The  users 
that  have  outdated  systems  do  not 
have  money  to  remediate  any  Year 
2000  issues  and  sometimes  don’t 
even  have  the  money  to  recognize 
that  they  have  a  Y2K  problem.  Many 
of  the  earth  stations  throughout  the 
world  have  several  hundred  pieces 
of  computer  equipment  from  various 
manufactures  that  control  their  ability 
to  receive  telecommunications  i  n- 
formation.  For  example,  if  antenna 
control  units  fail  the  antenna  could 
not  point  to  the  satellite  and  no  i  n- 
formation  could  be  sent  or  r  eceived. 

“A  significant  part  of  INTELSAT’S 
international  communications  is  a 
two-way  communication  that  uses  an 
INTELSAT  satellite  between  country 
A  and  country  B.  If  country  A’s 
ground  network  is  Year  2000  co  m- 
pliant;  and  INTELSAT,  being  the 
supply  chain  in  the  middle,  is  also 
compliant;  and  country  B’s  ground 
network  is  not  Year  2000  compliant, 
then  you  will  have  a  failure  of  the 
complete  chain.”12 

Cable,  Mass  Media  and  Wir  eless 

Not  much  is  known  about  the  state  of 
the  cable,  mass  media  or  wireless 
industries.  The  FCC’s  Cable  Bureau 
is  in  the  second  phase  of  its  survey. 
The  survey  was  sent  to  companies 
accounting  for  approximately  78 
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percent  of  the  market  share  of  cable 
subscribers.  The  first  survey  began 
in  April  1998  and  found  that  while 
most  of  the  companies  surveyed  had 
started  assessments, 
there  was  little 
progress  in 

remediation.  In  Nove  m- 
ber  1998,  the  Cable 
Bureau  began  its 
second  survey  that 
covers  about  90%  of 
all  cable  subscribers. 

Response  should  be  back  and  a  s- 
sessed  some  time  in  the  first  quarter 
of  1 999.  It  is  also  expected  that  the 
Mass  Media  and  Wireless  Bureaus 
will  have  completed  initial  asses  s- 
ments  by  the  first  quarter  of  1999. 


CONCERNS 


The  Committee  has  three  outstan  d- 
ing  concerns  in  communic  ations: 

■  increased  contingency  planning 
among  carriers 

■  increased  attention  to  Y2K  sec  u- 
rity  concerns 

■  international  communications 

Contingency  Pla  nning 

Carriers  have  undertaken  massive 
code  corrections,  which  will  be  in 
place  by  the  end  of  1998.  The  large 
number  of  code  corrections  increase 
the  possibility  of  disruptions  from  the 
introduction  of  new  errors. 13  In  tes¬ 
timony  before  the  Committee,  Judith 
List,  Ph.D.,  vice  president  and  ge  n- 
eral  manager,  Integrated  Technology 


Solutions  Business  Unit,  Bellcore 
noted  the  following: 

“ Finally ,  there  will  be  problems,  and 
there  is  a  level  of 
uncertainty  in  this  area 
that  makes  it  difficult  to 
predict  where  the 

problems  will  be.  In  the 
software  industry  today, 
the  best  in  class 
companies  find  95 
percent  of  code 

anomalies  before  the  software  ever 
gets  to  the  field.  That  means  that  5 
percent  of  software  anomalies  are 
found  after  the  code  is  operational. 
Furthermore,  according  to  the  Soft¬ 
ware  Engineering  Institute,  a  new 
defect  is  introduced  with  every  ap¬ 
proximately  4  112  fixes  of  software 
code.  Both  of  these  statistics  su  g- 
gest  that,  given  the  pervasiveness 
and  extent  of  Year  2000  elements, 
there  will  be  problems.  Furthermore, 
Y2K  contingency  planning  and  di  s- 
aster  recovery  needs  to  address 
plans  differently  than  traditional 
business  continuity  plans  because 
backup  systems  are  likely  to  have 
the  same  Year  2000  problems,  is¬ 
sues  may  be  more  widespread 
across  a  number  of  industries,  and 
problems  may  last  for  a  longer  p  e- 
riodoftime. 

In  October  1997,  the  President’s 
Commission  on  Critical  Infrastructure 
Protection  expressed  concerns  :  “The 
unbundling  of  local  networks  ma  n- 
dated  by  the  Telecommunications 
Act  of  1996  has  the  potential  to  cr  e- 
ate  millions  of  new  interconnections 
without  any  significant  increase  in 
the  size  or  redundancy  of  network 
plants.  Unbundling  will  be  imp I  e- 


It  is  critical  that 
contingency  and 
disaster  recovery 
planning  and 
training  be 
implemented. 
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merited  at  a  time  of  rapid  and  large- 
scale  change  in  network  technolo¬ 
gies.  The  interaction  of  complexity 
and  new  technologies  will  almost 
certainly  expand  the  universe  of 
ways  in  which  system  failure  can  o  c- 
cur,  and,  unlike  natural  disasters, 
there  is  no  assurance  that  such  fai  I- 
ures  will  be  localized  .”14 

Telecommunications  in  the  U.S.  has 
one  of  the  most  highly  developed 
systems  of  infrastructure  assurance. 

In  1963,  the  NCS  was  created  to  e  n- 
sure  the  federal  government  has  e  n- 
during  communications.  Composed 
of  23  federal  agencies,  the  NCS 
works  closely  with  the  telecommun  i- 
cations  industry  and  maintains  a  c  o- 
ordinating  center  to  resolve  failures 
in  the  networks  that  could  impact  n  a- 
tional  security  or  emergency  prepa  r- 
edness. 

The  NCS  works  closely  with  the  N  a- 
tional  Security  Telecommunications 
Advisory  Committee  (NSTAC),  an 
advisory  committee  created  in  antic  i- 
pation  of  the  AT&T  divestiture. 
Composed  of  30  chief  executive  off  i- 
cers  from  telecommunications,  i  n- 
formation  technology,  aerospace  and 
banking  companies,  the  NSTAC 
makes  recommendations  to  the 
President  on  issues  critical  to  pro¬ 
tecting  the  U.S.  communications  i  n- 
frastructure.  In  September  1998,  the 
NSTAC  released  the  first  report  that 
examined  the  impact  of  Y2K  on  the 
assurance  of  national  security  and 
emergency  preparedness  commun  i- 
cations.  The  NSTAC  report  noted 
that  “no  organization,  either  private 
or  government  could  offer  a  guara  n- 
tee  of  total  Y2K  problem  eradication 
from  its  networks,  services,  or  sys¬ 


tems.  Additionally,  these  organiza¬ 
tions  could  not  offer  guarantees  of 
the  adequacy  of  Y2K  internetwork 
interoperability  testing.  ” 15 

In  July  1998  the  NSTAC  testified 
about  the  findings  of  its  widespread 
outage  report  and  highlighted  the 
fact  that  the  industry  has  had  limited 
experience  with  systemic,  wid  e- 
spread  network  failures.  Both  the 
NCS  and  the  NSTAC  believe  that  the 
probability  for  Y2K-related  wid  e- 
spread  outages  is  extremely  low. 
However,  because  of  our  reliance  on 
communications  the  cost  would  be 
extraordinarily  high  for  commerce 
and  defense.  In  testimony  before 
the  Committee,  NSTAC  expressed 
concern  about  the  lack  of  an  indu  s- 
try-wide  plan  to  facilitate  intercarrier 
coordination  for  recovering  from  a 
widespread  outage  of  this  nature. 
Most  carriers  have  internal  plans  and 
processes  for  maintaining  the  inte  g- 
rity  of  their  own  networks.  Looking 
further  at  contingency  planning  and 
recovery  from  a  widespread  outage, 
the  NSTAC  questioned  whether  e  x- 
isting  communication  and  coordin  a- 
tioh  mechanisms  among  service 
providers  were  adequate  for  efficient 
reconstitution  of  service.  It  was  u  n- 
clear  whether  the  existing  agre  e- 
ments,  communications  systems, 
and  coordinating  mechanisms  in  the 
industry  could  mitigate  a  severe 
widespread  service  outage. 

During  reconstitution,  a  means  of 
communication  and  coordination 
between  and  among  critical  centers 
would  be  indispensable.  The  NCS 
works  closely  with  the  industry  and  is 
uniquely  positioned  to  collect  net- 
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work  outage  information  for  Y2K  di  s- 

As  part  of  its  normal  contingency  e  f- 
forts,  the  NCS  maintains  a  private 
communications  network,  which  is 
independent  from  the  PN  and  pro¬ 
vides  connectivity  to  the  FCC,  all  of 
the  regional  Bell  operating  compa¬ 
nies,  GTE,  Sprint,  and  switch 
manufacturers.  In  preparing  for  Y2K 
and  other  threats  to  the  communic  a- 
tions  infrastructure,  the  NCS  is  co  n- 
sidering  expanding  its  network  to  i  n- 
clude  the  Critical  Infrastructure  As¬ 
surance  Office,  and  the  National  I  n- 
frastructure  Protection  Center.  The 
private  network  could  facilitate  re¬ 
constitution  efforts  in  the  event  of  s  e- 
rious  disruptions.  As  an  additional 
backup,  the  NCS  maintains  high  fr  e- 
quency  (HF)  radio  communications 
with  major  telecommunications  pro¬ 
viders  and  can  also  access  over 
1000  HF  radio  sites  around  the 
world. 

Chairman  Bennett  remained  co  n- 
cerned  that  the  administration  was 
not  developing  the  necessary  policy 
to  respond  to  an  unanticipated  Y2K 
disruption  in  the  U.S  communica¬ 
tions  infrastructure.  In  August  1998, 
Senator  Bennett  wrote  to  the  Dire  c- 
tor  of  the  Office  of  Science  and 
Technology  Policy  (OSTP),  and 
asked  what  role  the  Joint  Teleco  m- 
munications  Resources  Board 
(JTRB)17  would  play  in  the  event  of  a 
Y2K-related  emergency.  The  As¬ 
signment  of  National  Security  Erne  r- 
gency  Preparedness  Telecommun  i- 
cations  (Executive  Order  12472), 
tasked  the  Director  of  OSTP  to 
maintain  a  JTRB  to  advise  the  Pres  i- 
dent  on  the  emergency  allocation  of 


telecommunications  resources.  The 
JTRB  met  in  January  1999  for  the 
first  time  in  several  years  to  dete  r- 
mine  how  it  might  respond  to  a  ser  i- 
ous  Y2K  related  event  in  commun  i- 
cations. 

Security 

The  Committee  has  repeatedly  e  x- 
pressed  concern  about  the  number 
of  code  corrections  that  are  taking 
place  in  foreign  countries  and  the 
long-term  security  risks  that  this 
could  cause  for  information  assu  r- 
ance  in  the  U.S.  In  response  to 
Committee  questions  about  the 
threat  of  malicious  code,  Dr.  List  r  e- 
sponded: 

“There  is  the  possibility  that  security 
risks  can  be  introduced  into  any 
code  that  is  being  remediated,  not 
just  code  that  is  corrected  in  foreign 
countries.  Programmers  can,  for  e  x- 
ample,  introduce  trap  doors  or  back 
doors  for  non-malicious  reasons,  for 
example,  to  make  it  easier  for  them 
to  maintain  the  code.  These  trap 
doors  or  back  doors  can  then  be 
used  for  other  purposes  to  obtain 
unauthorized  access  to  the  software 
program.  In  other  instances,  security 
problems  can  be  introduced  for  d  i- 
rectly  malicious  purposes  during  the 
code  remediation  process.  To  date, 

I  know  of  no  easy  way  to  assess 
code  to  ascertain  the  existence  of 
these  types  of  security  risks.  It  r  e- 
quires  labor  intensive  examination  of 
the  code,  line  by  line.  Companies 
can  work  to  protect  themselves  from 
such  risks  by  conducting  adequate 
due  diligence  of  employees,  con¬ 
tractors,  and  service  providers  that 
they  may  hire  to  remediate  Y2K 


Senate  Special  Committee  on  the  Year  2000  Technology  Problem 


62 


Investigating  The  Impact  of  the  Year  2000  Problem 


problems.  In  addition,  implementing 
various  policies  (such  as  code  in¬ 
spections)  to  monitor  the  code  re¬ 
mediation  process  also  can  help  r  e- 
duce  risk.”18 

International  Communications 

Today  global  telecommunications  is 
a  growing  $800  billion  industry.  I  n- 
dustry  analysts  note  that  75%  of  all 
traffic  originates  or  terminates  in  one 
of  six  countries:  France,  Germany, 
Italy,  Japan,  U.K.  and  the  U.S.  In 
addition,  90%  of  all  call  traffic  comes 
from  20  countries.  Forty  percent  of 
the  global  traffic  touches  the  U.S., 
20%  Europe,  and  1 5%  through  Asian 
hubs.19  Telecommunications  reve¬ 
nues  in  the  U.S.  are  about  $300  bi  I- 
lion  a  year,  with  the  majority  of  rev  e- 
nues  coming  from  the  provision  of 
services. 

At  the  United  Nations’  “National  Y2K 
Coordinators  Meeting”  on  December 
11th  1998,  the  International  Tele¬ 
communication  Union’s  (ITU)  Year 
2000  Task  Force  outlined  global  ef¬ 
forts  to  ensure  Y2K  readiness  in 
telecommunications. 

The  ITU  established  a  Y2K  task 
force  in  March  1998  to  raise  the 
awareness  of  operators  and  carriers 
by  providing  information  on  potential 
Y2K  problems.  The  ITU  considers 
one  of  the  greatest  obstacles  to 
global  readiness  is  the  lack  of 
awareness  and  action  at  the  gov¬ 
ernmental  level  to  pressure  tel  e- 
communications  operators  to  share 
information  about  their  Y2K  read  i- 
ness.  Part  of  the  ITU’s  effort  has 
been  to  recommend  compliance 
standards  and  also  promote  the 


sharing  of  information.  In  addition, 
the  ITU  has  encouraged  the  sharing 
of  Y2K  readiness  information  with 
customers.  The  ITU  has  had  three 
main  goals: 

•  promote  Y2K  best  pra  ctices 

•  facilitate  global  interoperability 
testing 

•  provide  specific  guidance  on 
business  continuity  planning. 

The  ITU’s  global  assessment  is 
somewhat  sketchy  at  this  point. 
However,  according  to  the  ITU,  the 
U.S.,  Japan,  China,  Germany, 
France  and  the  U.K.  account  for  53% 
of  wireline  infrastructure,  and  all  are 
reported  to  have  Y2K  programs  in 
place.  The  ITU  task  force  also 
pointed  out  that  20  territories  a  c- 
counted  for  80%  of  the  world’s  wir  e- 
lines,  but  there  were  still  no  details 
from  Italy,  Taiwan  (Republic  of 
China)  or  Ukraine.  Throughout  the 
first  quarter  of  1999,  the  ITU  will  o  r- 
ganize  workshops  as  needed  in  sp  e- 
cific  locations  including  Russia,  India 
and  Asia,  to  promote  awareness  and 
to  increase  knowledge  of  Y2K  read  i- 
ness. 

Some  initial  testing  in  September 
1998  did  not  uncover  any  specific 
Y2K  problems.  However,  the  lack  of 
information  about  the  readiness  of 
global  communications  remains  a 
serious  concern.  U.S.  carriers  are 
concerned  that  if  foreign  companies 
are  not  prepared,  call  completion 
could  be  impacted. 
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TRANSPORTATION 


OVERVIEW 


The  transportation  sector  is  a  co  m- 
plex  and  diverse  mixture  of  public 
and  private  enterprises.  This  sector 
includes  three  divisions:  aviation, 
surface  transportation  and  maritime 
entities.  Within 
each  division,  dis¬ 
tinct  “modes”  exist. 

For  example,  rail¬ 
roads  and  trucking 
are  both  surface 
modes,  but  are 
separate  industries 
in  their  own  right. 

To  keep  the  scope 
of  the  Committee’s  investigation 
manageable,  the  Committee  s  e- 
lected  areas  having  a  major  impact 
on  public  safety  or  the  nation’s 
economy.  Y2K  problems  may  also 
exist  in  areas  not  covered  in  this  i  n- 
vestigation. 

Transportation  and  Y2K  Issues 

In  pursuing  this  investigation,  the 
Committee  staff  conducted  inte  r- 
views  with  a  wide  variety  of  know  I- 
edgeable  parties  including:  federal 
agencies  that  regulate  and  provide 
services  to  transportation  system 
operators,  system  operators  the  m- 
selves,  associations  representing  a 
broad  cross-section  of  the  industry, 
equipment  manufacturers  and  facility 
operators  (e.g.  airports  and  ports).  A 
complete  list  of  organizations  inte  r- 
viewed  is  appended  to  this  se  ction. 


Like  most  other  sectors  of  the  eco  n- 
omy,  transportation  has  become 
highly  automated  and  dependent  on 
information  technology  to  transport 
people  and  goods  safely,  quickly, 
and  economically.  However,  such 
automation  has  made  this  sector 
vulnerable  to  Y2K  concerns  and  i  s- 
sues  seen  in 
other  sectors  by 
the  Committee. 
These  include 
obtaining  assur¬ 
ance  of  Govern¬ 
ment  services 
such  as  air-traffic 
control  and  cus¬ 
toms  processing, 
wide  variations  in 
individual  firms’  Y2K  preparedness, 
a  profusion  of  rumors  and  misinfo  r- 
mation,  and  a  general  uncertainty 
about  the  risk  presented  by  embe  d- 
ded  microchips.  In  addition,  the 
transportation  sector  raises  many 
concerns  about  international  Y2K 
preparations.  These  included  the 
Y2K  readiness  of  international  air 
traffic  control,  non-U.S.  airports,  and 
non-U.S.  ports,  all  of  which  affect 
U.S.  travelers,  businesses,  and  co  n- 
sumers. 

The  Committee  has  found  that  all  the 
major  transportation  players — the 
biggest  operators,  the  largest  facil  i- 
ties,  the  federal  agencies,  etc. — have 
substantial  Y2K  programs  underway. 
In  all  these  programs,  the  emphasis 
is  first  on  safety.  All  of  these  entities 
are  well  on  the  way  to  being  ‘Y2K 
ready’  on  their  own.  in  addition, 


Year  2000  malfunctions  in 

TRANSPORTATION  ARE  AT  THEIR 
BEST  AN  INCONVENIENCE,  BUT 
THEY  MUST  NOT  AND  CANNOT  PUT 
OUR  CITIZENS  AT  RISK. 

Senator  Chris  Dodd 
September,  1998 
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parties  show  a  willingness  to  coo  p- 
erate  with  each  other  in  transport  a- 
tion:  large  airports  have  reached  out 
to  smaller  feeder  airports  and  rai  I- 
roads  have  shared  information  about 
Y2K  problems.  However,  there  is 
reason  to  be  concerned  about  the 
readiness  of  smaller  players  in  this 
sector,  as  has  been  the  case  in  other 
sectors.  For  ex¬ 
ample,  there  are 
thousands  of  city 
and  county  gov¬ 
ernments  in  the 
U.S.  that  are  re¬ 
sponsible  for  op¬ 
erating  and 
maintaining  the 
local  surface 

transportation  infrastructure.  The 
Y2K  planning  of  these  governmental 
entities  has  been  very  slow.  A  good 
example  is  highlighted  by  the  Se  p- 
tember  1998  survey  from  the  com  p- 
troller  of  the  state  of  New  York,  who 
found  that  a  disturbingly  large  nu  m- 
ber  of  cities,  towns  and  villages  in 
that  state  had  not,  at  that  time,  made 
any  assessment  or  planning  for  the 
Y2K  problem. 


MAJOR  INITIATIVES 


GAO  Airport  Survey 

Airports  are  a  critical  component  of 
U.S.  aviation  operations,  often  re¬ 
ferred  to  as  the  National  Airspace 
System  (NAS).  Airports  are  the  e  n- 
try  and  exit  points  to  the  NAS  for 
most  travelers.  While  much  attention 
has  been  centered  on  the  Federal 
Aviation  Administration’s  ability  to 
guarantee  that  its  air  traffic  control 


system  will  continue  to  operate 
safely  and  efficiently  during  and  after 
the  millennium  date  change,  less 
attention  has  been  focused  on  the 
readiness  of  the  nation's  ai  rports. 

The  Senate  Committee  on  Co  m- 
merce,  Science  and  Transportation 
has  requested  the  U.S.  General  A  c- 
counting  Office 
(GAO)  to  review 
the  Y2K  status  of 
the  systems  and 
equipment  inte¬ 
gral  to  the  opera¬ 
tion  of  the  na¬ 
tion’s  airports.  At 
issue  are  sys¬ 
tems  for  lighting 
runways,  controlling  access  to  se¬ 
cured  areas,  handling  baggage  and 
fueling  aircraft.  Breakdowns  in  these 
vital  systems  could  disrupt  an  ai  r- 
port’s  ability  to  move  aircraft  and 
travelers  efficiently  and  safely  and 
could  ripple  throughout  the  entire 
NAS,  thus  creating  system  gridlock. 

As  part  of  its  review,  GAO  is  su  r- 
veying  more  than  400  of  the  nation’s 
airports  to  determine  progress  made 
toward  ensuring  that  operations  will 
not  be  seriously  affected  by  Y2K 
malfunctions.  The  specific  research 
questions  guiding  this  review  are: 

•  How  will  the  safety,  security  and 
efficiency  of  the  NAS  be  affected 
if  the  airports'  Y2K  preparations 
are  not  adequate? 

•  What  conditions  will  affect  the 
outcome  of  airports’  Y2K  prep  a- 
rations? 

•  What  progress  have  airports 
made  to  ensure  that  their  co  m- 
puters  and  electronic  equi  p- 


Highlights  of  U.S.  Aviation 

-13  major  U.S.  airlines 

-34  national  airlines 

-52  regional  airlines 

-670  certified  airports 

-550  million  annual  U.S.  passe  ngers 

-$100  billion  total  operating  revenues 
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merit  will  function  on  and  after 

January  1 , 2000? 

The  survey  data  will  be  suppl  e- 
mented  with  site  visits  to  a  cross- 
section  of  airports  in  order  to  gather 
more  in-depth  knowledge  of  the 
challenges  faced  by  airport  mana  g- 
ers.  The  report  is  expected  to  be 
available  in  February  1999. 

IATA  Survey 

The  International 
Air  Transport  As¬ 
sociation  (IATA)  is 
the  major  body  for 
coordinating  in¬ 
terairline  coopera¬ 
tion.  It  currently 
has  260  member 
airlines  from  over  130  nations.  IATA 
has  been  working  with  its  members 
since  1 996  to  cope  with  the  mille  n- 
nium  bug.  IATA  members  are 
spending  over  $1.6  billion  to  resolve 
Y2K  problems  internally. 

In  1997,  IATA  released  a  survey  of 
44  of  its  member  airlines  on  their 
Y2K  preparations  and  concerns. 
This  survey  revealed  that  61%  of  the 
airlines  participating  in  the  survey 
rated  the  Y2K  problem  critical  to  the 
industry  and  another  32%  rated  it 
fairly  serious.  lATA’s  next  initiative 
has  focused  on  airports  around  the 
world.  IATA  has  targeted  100%  of 
the  international  airports  and  Air 
Traffic  System  (ATS)  providers  ou  t- 
side  of  North  America  and  used  by 
IATA  members.  Although  IATA  is 
keeping  its  survey  results  private  to 
its  member  companies,  and  the  pu  b- 
lic  will  not  be  privy  to  its  survey  r  e- 
sults,  the  comprehensiveness  of 


lATA’s  membership  should  provide 
reasonable  assurance  that  an  airline 
will  not  be  flying  unknowingly  into  a 
non-compliant  airport  in  January 
2000. 

ICAO  Status  Tracking 

The  International  Civil  Aviation  O  r- 
ganization  (ICAO)  was  established  in 

1947  “in  order 
that  interna¬ 
tional  civil 

aviation  may 
be  developed 
in  a  safe  and 
orderly  manner 
and  that  inter¬ 
national  air 
transport 
services  may 
be  established  on  the  basis  of  equa  I- 
ity  of  opportunity  and  operated 
soundly  and  economically.”  In  the 
same  year,  ICAO  became  a  specia  I- 
ized  agency  of  the  United  Nations. 
ICAO  now  encompasses  185  na¬ 
tions.  In  an  effort  to  ensure  that 
worldwide  air  traffic  control  and  i  n- 
ternational  airport  operators  are  fully 
aware  of  the  scope  of  the  Y2K  pro  b- 
lem,  ICAO  has  developed  an  action 
plan  that  it  is  currently  implementing. 
To  date,  three  ICAO  “state  letters” 
(advisory  letters  to  member  cou  n- 
tries)  have  been  distributed:  the  first 
on  December  1997,  the  second  in 
May  1998  and  the  last  in  November 
1998.  This  is  part  of  an  ongoing  e  f- 
fort  to  alert  ICAO  contracting  states 
to  the  extent  of  the  problem,  to  i  n- 
form  them  of  action  being  taken  by 
ICAO  and  to  request  additional  i  n- 
formation. 


Railroad  Highlights 

-Over  700  U.S.  Railroads 
-Over  220,000  miles  of  track 
-20,000  locomotives 
-$32.7  billion  in  operating  revenue 
-Over  265,000  employees 
-20  million  intercity  passengers 
-48  million  commuter  passengers 
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While  ICAO  has  no  regulatory 
authority  over  its  member  states,  it 
does  serve  as  an  adviser  to  the  air¬ 
traveling  public.  In  this  capacity, 
ICAO  had  said  that 
it  would  publish 
“status  reports  on 
the  progress  among 
States  in  order  to 
provide  confidence 
to  the  travelling 
public  and  aircraft 
operators."  How¬ 
ever,  ICAO  has  at 
this  time  dropped  its 
plans  to  publish  these  assessment 
reports. 


ASSESSMENTS 


Transportation  sector  survey 
conducted  by  Committee  staff. 

In  preparation  for  the  September  10, 
1998  hearing  on  transportation- 
related  Y2K  issues,  the  staff  of  the 
Special  Committee  on  the  Year  2000 
Technology  Problem  conducted  a 
survey  of  large  companies  and 
service  providers  in  the  transport  a- 
tion  sector.  The  results  of  this  su  r- 
vey  are  summarized  in  a  table  a  t- 
tached  to  this  section. 

To  sample  the  transportation  sector, 
representatives  were  selected  from 
major  airlines,  airports,  railroads, 
maritime  shippers,  trucking  comp  a- 
nies  and  metropolitan  transit  author  i- 
ties.  The  Committee  staff  asked 
survey  respondents  for  information 
on  their  automated  systems  used  to 
manage  and  operate  their  respective 
transportation  systems.  This  i  n- 


cluded  both  their  computer  systems 
(often  referred  to  as  Information 

Technology  or  IT)  and  embedded 

systems,  such  as  controllers  int  e- 

grated  into 
transportation 
vehicles  or 
facility  control 
and  monitor¬ 
ing  systems. 
In  order  to 
facilitate 
honest  and 
candid  an¬ 
swers  to  sur¬ 
vey  questions,  respondents  were 
given  a  pledge  of  confidentiality. 
Significant  items  learned  from  the 
survey  include: 

•  62%  of  the  respondents  reported 
that  they  had  not  completed  their 
Y2K  assessment  process.  This 
is  disturbing  given  the  short  time 
remaining  until  December  31, 
1999.  By  comparison,  the  Office 
of  Management  and  Budget  d  i- 
rected  all  Federal  agencies  to 
complete  their  assessments  by 
June  1997. 

•  Six  of  the  eight  who  answered  a 
question  on  mission  critical  sys¬ 
tems  reported  that  70%  or  more 
of  their  systems  are  mission  crit  i- 
cai. 

•  100%  of  the  respondents  re¬ 
ported  that  their  contingency 
plans  are  incomplete.  Even  more 
disturbing,  over  half  reported  that 
they  were  not  even  working  on 
contingency  plans  at  this  time. 

•  94%  reported  their  total  expected 
Y2K  expenditures.  The  total 


Trucking  Industry  Highlights 

-84,212  fleets  of  10  or  more  trucks 
-9.5  million  people  employed  in  trucking 
-$346  billion  in  gross  revenues 
-Serves  every  U.S.  community 
-77%  of  all  communities  rely  solely  on 
trucking 

-$27  billion  paid  in  highway  taxes 
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projected  cumulative  costs  at  this 
time  are  over  $650  mi  llion. 

•  50%  of  the  respondents  reported 
they  anticipated  being  involved  in 
litigation  due  to  the  Y2K  problem. 


•  94%  report 
they  will  fin¬ 
ish  their  Y2K 
preparations 
on  time.  The 
Committee 
staff  feels 
this  is  overly 
optimistic 


Public  Transit  Highlights 


-6,000  U.S.  transit  agencies 

-$7  billion  in  annual  capital  expenses 

-$19  billion  in  annual  operating  e  xpenses 

-8  billion  trips  annually 

-3.7  billion  miles  and  246  million  hours  of 

annual  service 

-300,000  employees 


ing  overall  air  travel  are  not  Y2K 
compliant,  the  system  will  be  s  e- 
verely  limited  in  its  overall  capacity, 
leading  to  lost  revenue  for  the  ai  r- 
lines,  lost  productivity  in  the  eco  n- 
omy  and  significant  public  dissati  s- 
faction  with  the 
air  transporta¬ 
tion  system. 


given  that 
most  of  them  have  not  yet  co  m- 
pleted  the  process  of  fully  as¬ 
sessing  the  scope  of  their  Y2K 
problem. 


The  transporta¬ 
tion  firms  su  r- 
veyed  did  not 
become  aware 
of  Y2K  prob¬ 
lems  until  1995 
or  later.  Almost  all  have  reported 
establishing  a  formal  Y2K  office 
and/or  project  within  their  company. 


Other  studies  have  concluded  that 
medium  and  small  enterprises  are 
not  as  advanced  in  their  Y2K  pre¬ 
paredness  as  their  larger  counte  r- 
parts.  Hence,  since  this  study  fo¬ 
cused  on  large  transportation  firms, 
the  results  presented  here  probably 
represent  the  best-prepared  portion 
of  the  industry. 

The  survey  raises  many  concerns 
about  aviation  given  the  dispropo  r- 
tionally  poor  response  rate  to  the 
survey  of  both  airports  and  airlines. 
Given  the  concern  that  already  exists 
about  the  readiness  of  the  Air  Traffic 
Control  system,  this  will  add  to  the 
general  unease  about  air  travel.  The 
Committee  staff  finds  the  case  for 
the  Y2K  flight  readiness  of  comme  r- 
cial  jetliners  convincing.  Planes  will 
not  literally  “drop  out  of  the  sky”  on 
January  1,  2000.  But,  if  the  ground- 
based  information  systems  support¬ 


Companies  are  making  the  best  pr  o- 
gress  on  their  mainframe  and  client- 
server  applications  and  are  furthest 
behind  on  the  embedded  chip  a  s- 
sessment  and  remediation  aspects 
of  the  problem. 

Costs  varied  widely  across  survey 
responses.  In  an  attempt  to  explain 
this  disparity,  the  Committee  found  a 
marked  lack  of  uniform  accounting 
for  Y2K  expend  itures. 

A  little  more  than  half  the  surveyed 
parties  were  worried  about  becoming 
party  to  litigation  brought  by  Y2K 
failures  or  upsets.  Still  more  had 
concerns  about  the  potential  for 
business  partners  to  fail  to  deliver 
expected  products  or  services.  Ot  ti¬ 
ers  felt  that  they  could  plan  for  these 
contingencies. 

Organizations  were  also  asked  what 
Congress  could  do  to  facilitate  Y2K 
efforts  in  the  transportation  sector. 
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By  far,  the  most  common  answer 
(from  about  50%  of  respondents), 
was  to  produce  legislation  that  su  p- 
ports  good  faith  sharing  of  Y2K  i  n- 
formation  and  limits  the  liability  o  r- 
ganizations  are  exposed  to  by  Y2K 
problems,  upsets,  or 
failures.  Several 
other  actions  were 
mentioned  by  more 
than  one  respondent: 

(1)  Congress  should 
lead  in  the  discovery 
and  dissemination  of 
valid  Y2K  information 
to  offset  the  misin¬ 
formation  widely  dis¬ 
seminated  today,  (2)  antitrust  pro¬ 
tection  is  needed  for  companies  who 
normally  are  competitors  but  who 
cooperate  on  Y2K  programs  and  (3) 
Congress  should  continually  oversee 
the  Y2K  programs  of  federal  age  n- 
cies  and  service  providers  important 
to  all  industries,  such  as  power  util  i- 
ties  and  telecommunic  ations. 

ATA  Survey 

The  Air  Transportation  Association 
(ATA)  is  the  sole  trade  organization 
of  the  U.S.  major  airlines.  The  28 
members  include  all  the  large  U.S. 
passenger  and  cargo  airlines  as  well 
as  associate  members  from  Canada, 
Mexico  and  Holland.  ATA  members 
collectively  transport  over  95%  of  all 
air  passengers  and  cargo  in  the  U.S. 

After  concern  was  raised  about  ai  r- 
ports  by  early  surveys  and  the  ai  r- 
lines,  ATA  has  focused  an  initiative 
on  domestic  airports.  To  date,  it  has 
completed  158  awareness  and  as¬ 
sessment  visits  in  coordination  with 
the  Airports  Council  International  and 


the  FAA.  In  addition,  Y2K  planning 
kits  have  been  sent  to  over  400  ai  r- 
ports  that  the  ATA  team  could  not 
visit. 

Testing  for  Y2K  readiness  is  either 
underway  or  soon 
to  begin  with  the 
Dallas-Fort  Worth 
Airport,  the  Seat- 
tle-Tacoma  Air¬ 
port  and  United 
Airlines.  Results 
of  ATA  activity 
and  testing  were 
not  available  at 
the  time  of  this 
report,  but  a  major  readiness  a  n- 
nouncement  is  expected  from  the 
FAA,  ATA  and  several  airlines  in  the 
early  part  of  1999. 

Two  major  issues  have  been  raised 
in  the  airport  assessments.  The  first 
is  that  airports  are  often  bound  by 
many  cumbersome  rules  when  a  c- 
quiring  equipment  or  services. 
These  rules  can  be  loosened  during 
emergencies  and  the  Committee 
feels  that  the  FAA,  the  airports  and 
governing  authorities  should  begin 
looking  at  Y2K  as  an  emergency  and 
expedite  airport  remediation  pr  o- 
curements.  The  second  issue  is  the 
disparate  nature  of  airport  oversight 
and  funding.  This  unfortunately 
means  that  no  one  general  program 
will  work  for  all  airports  and  Y2K 
programs  will  have  to  be  tailored  to 
the  specifics  of  an  ind  ividual  airport. 


Maritime  Highlights 

The  port  industry,  port  users  and 
capital  expenditures  for  maritime 
equipment  provides: 

-16  million  jobs  nationwide 
-$154  billion  in  Federal  taxes 
-$783  billion  of  GDP 
-70%  of  U.S.  Customs  rev  enues 
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CONCERNS 


General  Co  ncerns 

Several  general  concerns  were 
raised  by  parties  interviewed  for  this 
sector  including  domestic  and  fo  r- 
eign  partner  readiness,  and  federal 
government  readiness.  Examples  of 
the  first  category  include  airline  co  n- 
cerns  about  airports  and  airport  co  n- 
cerns  about  jet  fuel  pipelines.  In  the 
second  case,  the  most  common 
concerns  were  about  the  Y2K  read  i- 
ness  of  the  FAA’s  Air  Traffic  Control 
systems  and  U.S.  Customs  Service’s 
automated  import  and  export  sys¬ 
tems.  The  Committee  staff  met  with 
the  General  Accounting  Office  and 
the  Department  of  Transpiration  I  n- 
spector  General  on  the  FAA’s  Y2K 
progress  and  came  away  with  the 
general  sense  that  the  FAA  is  ma  k- 
ing  substantial  progress  but  still  has 
significant  challenges  ahead.  The 
Committee  also  interviewed  the  U.S. 
Customs  Service  on  its  Y2K  prep  a- 
rations.  The  material  presented 
showed  that  they  were  making  very 
good  progress  in  bringing  into  co  m- 
pliance  its  “Automated  Commercial 
System,”  which  clears  and  tracks 
imports  and  exports,  Y2K  compl  iant. 

Aviation-Specific  Y2K  Issues 

Aviation  is  by  far  the  most  complex 
and  automated  transportation  sector. 
In  the  words  of  one  interviewee,  “Ai  r- 
lines  and  airports  along  with  FAA 
and  air  traffic  service  providers  rely 
heavily  on  Y2K  infested  technology" 
and  “If  today  were  January  1,  2000, 
the  world’s  airline  system  would  fail.” 


The  major  airlines  interviewed  have 
substantial  Y2K  programs  and  seem 
to  be  making  significant  progress 
with  domestic  air  operational  read  i- 
ness.  However,  they  expressed 
concerns  about  FAA  Y2K  readiness. 
Although  the  airlines  stated  that  the 
FAA  is  moving  much  more  delibe  r- 
ately  now  than  a  year  ago,  the  ai  r- 
lines  are  concerned  that  the  FAA  still 
has  a  long  way  to  go.  One  airline, 
which  reported  doing  an  independent 
assessment,  said  it  was  satisfied 
with  the  validity  of  the  recent  FAA 
announcement  that  the  very  impo  r- 
tant  “HOST”  computer  for  the  e  n- 
route  air  traffic  control  centers  was 
not  Y2K  vulnerable. 

However,  GAO  testified  before  Co  n- 
gress  as  recently  as  August  6,  1998 
that  the  FAA  will  not  be  fully  ready  by 
January  1,  2000.  Significant  risks  in 
the  FAA  remediation  program  sited 
by  the  GAO  included: 

•  Ineffective  management  of  exte  r- 
nal  data  exchange  analysis  and 
remediation  efforts.  As  of  August 
6,  1998  half  the  exchanges  were 
still  not  examined  for  date  sens  i- 
tive  data;  of  the  25%  found  to 
have  date  sensitive  data,  over 
90%  of  those  needed  repairs. 

•  Poor  coordination  to  date  on  i  n- 
ternational  air  transportation  is¬ 
sues. 

•  Reliance  on  a  telecommunica¬ 
tions  infrastructure  that  is  not  t  o- 
tally  within  its  control  and  may  not 
be  renovated  on  time. 

•  Missteps  in  business  continuity 
and  contingency  planning.  The 
National  Air  Traffic  Controller’s 
Association  (NATCA)  has  crit  i- 
cized  the  current  version  of 
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FAA’s  plans  for  being  ambiguous 
in  responding  to  outages  of  crit  i- 
cal  facilities.  The  FAA  testified  at 
the  August  6,  1998  hearing  that 
finalized  contingency  plans  would 
be  available  by  August  31,  1998, 
but  that  date  slipped  at  first  until 
September  30  and  then  slipped 
again.  At  the  time  of  this  report, 
only  a  draft  version  of  the  FAA’s 
Y2K  contingency  plan  is  believed 
to  exist  and  it  has  not  been 
widely  distributed  in  the  aviation 
community  or  seen  by  the  Senate 
Committee. 

Airlines  can  be  affected  by  Y2K  in  a 
number  of  ways  other  than  the  loss 
of  Air  Traffic  Control  (ATC).  They 
are  heavily  dependent  on  scheduling 
programs  for  aircraft,  crews  and  re  s- 
ervations.  The  aircraft  themselves 
must  be  flight  ready.  Airport  facilities 
under  their  control  must  be  compl  i- 
ant.  Moreover,  external  utilities  (e.g., 
electric  power,  telecommunications 
and  aviation  fuel)  must  be  available. 
However,  the  major  airlines  inte  r- 
viewed  by  the  Committee  appear  to 
be  managing  their  internal  Y2K 
preparations  well  and  are  surveying 
their  external  providers  (e.g.,  foreign 
airports)  for  the  purpose  of  develo  p- 
ing  contingency  and  business  cont  i- 
nuity  plans. 

Airports  have  many  dependencies 
on  information  technology  that  may 
be  Y2K  vulnerable.  Areas  that  must 
be  assessed  include  runway  lighting 
systems  and  jetway  security  sys¬ 
tems.  One  airport  official  has 
claimed  that  only  one  pipeline,  orig  i- 
nating  in  Houston,  Texas,  supplies 
aviation  fuel  to  most  of  the  airports 
on  the  eastern  seaboard.  If  this 


pipeline  were  to  fail  on  January  1, 
2000,  the  airports  in  New  York  could 
only  operate  for  four  to  seven  days 
with  the  fuel  supply  on  hand.  Two 
surveys  are  underway  on  airport 
readiness:  the  ATA  is  surveying  d  o- 
mestic  airports  and  the  IATA  is  co  v- 
ering  airports  abroad.  Preliminary 
information  from  the  ongoing  ATA 
survey  indicates  that  38%  of  the  63 
airports  surveyed  do  not  have  a  Y2K 
plan.  In  addition,  concerned  U.S. 
airlines  are  individually  raising  Y2K 
awareness  on  their  initiative  because 
of  the  late  start  that  IATA  had  in  its 
efforts. 

Concerning  aircraft,  the  Committee 
interviewed  the  Boeing  Commercial 
Aircraft  Group  (BCAG)  that  provides 
the  preponderance  of  planes  to  U.S. 
carriers.  Boeing  has  done  a  tho  r- 
ough  analysis  of  all  makes  and  mo  d- 
els  of  Boeing  aircraft  and  aircraft 
from  the  recently  acquired  McDo  n- 
nell  Douglas  Corporation  (maker  of 
models  such  as  the  DC-9s  and  MD- 
11s).  BCAG  contends  that  a  few  m  i- 
nor  “nuisance”  vulnerabilities  have 
been  detected  in  Flight  Management 
Systems  on  older  aircraft.  However, 
the  most  recent  models  are  all  Y2K 
ready.  Boeing  has  issued  service 
bulletins  and  service  letters  on  these 
nuisance  factors.  Hardware  and/or 
software  upgrades  are  available.  In 
addition,  BCAG  maintains  that  these 
problems  will  in  no  way  impact  the 
air-worthiness  of  the  aircraft.  The 
Committee  staff  received  the  same 
information  from  an  independent  and 
credible  source  during  a  subsequent 
interview  with  a  major  U.S.  carrier. 
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Y2K  Issues  in  Other  T ranspo  r- 
tation  Areas 

Railroads 

Railroads  (long  haul  and  short  haul) 
appear  to  have  fewer  Y2K  transpo  r- 
tation  equipment  problems.  As  with 
other  large  businesses,  major  inte  r- 
nal  business  systems  have  to  be 
analyzed  and  fixed.  Concerning  o  p- 
erational  safety,  the  short  haul  rai  I- 
roads  have  little  automation  and  b  e- 
lieve  they  will  not  be  affected  by  the 
century  date  change.  The  major  rai  I- 
roads  interviewed  have  ongoing  Y2K 
programs  and  are  fixing  problems. 
The  most  commonly  cited  opera¬ 
tional  problem  is  in  train  dispatching 
software,  but  the  Committee  staff 
was  informed  that  even  if  all  of  this 
software  were  not  repaired,  the  ou  t- 
come  would  pose  a  capacity  pro  b- 
lem,  but  not  a  safety  concern. 

In  earlier  testimony  before  the  Se  n- 
ate  Banking  Committee,  it  was  re¬ 
ported  that  virtually  none  of  the  e  x- 
isting  railroad  switches  are  manually 
switchable.  The  witness  contended 
that  the  railroad  switches  are  fully 
automated  and  controlled  by  em¬ 
bedded  chips,  which  are  likely  to 
pose  substantial  Y2K  problems.  The 
threat  this  could  pose  to  economic 
stability  in  the  U.S.  is  disconcerting. 
However,  it  is  the  propose  of  this  r  e- 
port  to  identify  and  debunk  myths 
like  that  of  the  automated  railroad 
switches  with  embedded  chips.  As 
the  Committee  has  learned,  co  n- 
cerns  about  automated  railroad 
switches  and  signaling  systems  a  p- 
pear  to  be  ill  founded.  The  Commi  t- 
tee  staff  heard  from  multiple  sources 
that  essentially  all  automated 


switches  have  manual  overrides  (no 
source  could  identify  one  which 
didn’t).  Concerning  signaling  and 
warning  systems,  there  didn’t  appear 
to  be  any  date-dependent  functions 
that  would  interfere  with  their  safe 
operations.  These  devices  are  event 
driven,  not  date  or  time  dependent. 
Even  in  the  unlikely  event  of  a  Y2K- 
related  failure  in  this  equipment  (e.g., 
a  power  outage),  work-around  pro¬ 
cedures  are  in  place  for  continued 
safe  operation  of  the  railroad,  a  I- 
though  with  diminished  capacity. 

Maritime  Transportation 

Y2K  awareness  within  the  maritime 
community  is  low  to  moderate. 
Maritime  cargo  shipping  (containe  r- 
ized,  bulk,  tanker,  etc.)  is  somewhat 
unique  from  other  transportation 
modes  in  that  each  ship  is  virtually 
custom  built.  Thus,  each  must  be 
individually  inventoried  and  a  s- 
sessed  for  Y2K  problems.  Maritime 
shipping  operational  safety  is  at 
greatest  risk  during  entry  and  exit 
from  ports.  To  avoid  increasing  that 
risk  due  to  possible  Y2K  problems, 
the  concept  of  keeping  ships  from 
entering  and  exiting  ports  during  the 
change  of  century  is  being  consi  d- 
ered  by  shipping  operators.  If  Y2K 
prevents  ports  from  operating  for  a 
lengthy  period,  there  will  be  a  high 
economic  cost  to  U.S.  companies. 
However,  given  that  the  millennium 
change  will  occur  on  New  Year’s 
Eve,  a  short  “stand  down”  period  will 
have  minimal  economic  impact.  Due 
to  the  long  lifecycle  of  ships,  major 
maritime  shipping  companies’  ship 
inventories  often  include  a  variety  of 
ages  and  automation  among  ships. 
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Committee  investigation  into  co  n- 
cerns  about  the  automation  of  oil 
tankers  did  not  yield  any  major  Y2K- 
related  safety  or  environmental  i  s- 
sues.  There  is  a  large  amount  of 
embedded  chip  technology  in  mat  e- 
rial  handling  equipment  at  ports. 
However,  assessments  of  that 
equipment  is  still  incomplete  and  it  is 
too  early  to  identify  significant  i  s- 
sues.  Along  with  revenue  systems, 
cargo  tracking,  maintenance  and 
scheduling  systems  are  a  major  co  n- 
cern,  since  most  use  commercial, 
off-the-shelf  (COTS)  software.  F  i- 
nally,  interviewees  did  not  have  an 
accurate  sense  of  the  status  of  inte  r- 
national  ports.  However,  it  is  widely 
believed  that  they  are  far  behind  in 
their  Y2K  efforts.  While  Y2K  impacts 
on  the  maritime  industry  may  pote  n- 
tially  interrupt  commerce,  safety  is 
less  an  issue  than  in  some  other  i  n- 
dustries. 

Trucking 

There  are  over  400,000  trucking 
companies  registered  with  depart¬ 
ment  of  motor  vehicle  agencies  in 
the  United  States.  Eighty  percent  of 
these  employ  fewer  than  20  trucks 
within  their  operations.  The  Amer  i- 
can  Trucking  Association  represents 
approximately  45,000  individual 
trucking  companies.  The  trucking 
industry  has  become  increasingly 
more  reliant  on  information  techno  I- 
ogy  and  electronic  data  interchange 
in  the  everyday  conduct  of  business 
transactions.  The  pro  cess  of  just-in- 
time  inventory  management  has 
drastically  reduced  reliance  on  long¬ 
term  warehouse  storage.  Cons  e- 
quently,  trucking  companies  have  in 
a  sense  become  mobile  warehouses 


that  rely  on  a  dependable  stream  of 
up-to-date  information  in  order  to 
effectively  service  custo  mers. 

The  trucking  industry  has  become 
highly  time  sensitive  and  uses  a  s  o- 
phisticated  level  of  computer  soft¬ 
ware  to  manage  its  workload.  The 
load  management  systems  of  these 
companies  involve  the  transfer  of 
electronic  data  between  shippers, 
brokers,  merchants  and  the  trucking 
companies.  This  includes  transmi  s- 
sion  of  shipping  status  notices,  bills 
of  lading  and  payment  forms.  I  n- 
dustry  automation  extends  to  a  d- 
vanced  on-board  vehicle  systems 
that  enable  a  company  to  remotely 
monitor  a  truck’s  engine  performance 
and  speed,  and  global  positioning 
systems  that  track  a  truck's  location. 
Computer  technology  is  also  used  in 
advanced  weigh-in-motion  devices, 
inspection  systems  and  safety  record 
databases. 

Public  Transit 

In  the  Public  Transit  area,  the  Co  m- 
mittee  staff  interviewed  the  Was  h- 
ington,  DC  and  New  York  Metro¬ 
politan  Transit  Authorities  and  the 
American  Public  Transit  Association 
(APTA).  The  Washington  MTA  pr  o- 
gram  started  late  and  is  only  in  its 
initial  phases.  The  New  York  pro¬ 
gram  started  much  earlier.  New 
York’s  size  creates  a  challenge,  but 
it  also  benefits  from  a  much  less 
automated  and  therefore  less  Y2K 
vulnerable  system.  Finally,  APTA 
has  surveyed  about  364  of  its  me  m- 
bers.  The  response  rate  was  about 
50%.  To  quote  from  the  report: 
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"...  further  examination  of  the  data 
reveals  conflicting  responses.  This 
raises  concern  about  the  ability  of 
transit  systems  in  dealing  with  Year 
2000  issues  and  their  under  estim  a- 
tion  of  Year  2000  problems.  ” 

Conclusions 

The  transportation  sector  is  the  lit  e- 
blood  of  our  modern  economy. 
Daily,  it  provides  millions  of  Amer  i- 
cans  and  American  businesses  with 
safe,  rapid  and  economical  transport 
of  their  people  and  goods.  It  has 
been  working  so  well  and  efficiently 
that  it  has  turned  boats,  trucks,  trains 
and  even  planes  into  mobile  ware¬ 
houses  that  efficiently  deliver  goods 
to  factories  and  cu  stomers  on  a  just- 
in-time  basis. 

Segments  of  the  transportation  se  c- 
tor  work  hand  in  hand  as  goods  and 
people  transfer  from  one  mode  to 
another.  This  coupling  of  modes  a  I- 
lows  the  best  mode  to  be  used  at 
any  given  time,  but  it  creates  a  d  e- 
pendency  linkage  that  leaves  the 
whole  system  vulnerable  if  just  one 
link  goes  down.  Thus  it  is  important 
that  all  major  segments  of  transpo  r- 
tation  be  Y2K  ready  at  the  same  time 


if  the  sector  is  going  to  maintain  its 
productivity  after  January  1 ,  2000. 

The  most  disturbing  findings  in  this 
sector  that  the  Committee  has  found 
are: 

•  Domestic  airports  have  (on  a  v- 
erage)  started  very  late  to  get 
ready  for  Y2K. 

•  The  FAA,  although  it  has  made 
great  strides  in  the  past  year,  has 
a  long  way  to  go  to  be  ready  for 
Y2K  and  remains  a  high  risk. 

•  The  situation  with  international  air 
traffic  control  and  airports  is 
much  worse  than  in  the  U.S.  and 
some  level  of  flight  rationing  is 
highly  possible  for  some  foreign 
destinations. 

•  The  maritime  shipping  industry 
has  not  moved  aggressively  on 
Y2K.  Disruptions  to  global  trade 
are  highly  likely. 

•  Public  transit  systems  may  not  be 
taking  the  Y2K  problem  seriously 
enough  to  be  ready  for  the  Year 
2000. 
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TRANSPORTATION  SECTOR  INTERVIEWS 


Transportation  Sector  Overall 

Department  of  Transport  ation  (DOT) 
Inspector  General’s  Office 
U.S.  Customs  Service  (Treasury) 
MITRE  Corporation 

Aviation  in  General 

General  Accounting  Office 

Federal  Aviation  Administration  (DOT) 

IBM 

Airport  representatives 

American  Ass’n  of  Airport  Executives 
Seattle-Tacoma  Airport  Authority 
Dallas-Fort  Worth  Airport  Authority 
New  York-New  Jersey  Port  Authority 
Airports  Council  International 

Airlines  representatives 

Air  Transport  Association  (ATA) 
International  Air  Transport  Association 
American  Airlines 
SABRE  Technology  Solutions 
United  Airlines 
Delta  Airlines 

Aviation  manufacturers 

Boeing  Commercial  Aircraft 


Railroads 

Federal  Railroad  Administration  (DOT) 
Association  of  American  Railroads 
American  Shortline  Railroad  Ass  o- 
ciation 
CSX 
Amtrak 

Burlington  Northern-Santa  Fe 

Shipping 

Maritime  Administration  (DOT) 

U.S.  Coast  Guard  (DOT) 

American  Association  of  Port  Authorities 
Officials 

Crowley  Maritime 
Sea  Land  (CSX) 

Chevron 

New  York/New  Jersey  Port  Authority 

Trucking  &  Highways 

Intelligent  Transportation  Society 
American  Trucking  Association 
American  Association  of  State  Highway 
and  Transportation  Officials 
Federal  Highway  Administration  (DOT) 
New  York/New  Jersey  Port  Authority 
Schneider  National 


Mass  Transit  Agencies 
Washington  MTA 

American  Public  Transit  Association 
New  York  MTA 
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FINANCIAL  SERVICES 


OVERVIEW: 

Both  the  Subcommittee  on  Financial 
Services  and  Technology  and  the 
Special  Committee  on  the  Year  2000 
Technology  Problem  examined  the 
financial  services  sector  during  the 
105th  Congress.  Consequently,  it 
has  been  the  subject  of  more  ove  r- 
sight  than  any  other  industry. 

The  financial  services  industry  is 
particularly  susceptible  to  the  Y2K 
problem.  The  industry  uses  compu  t- 
ers  to  calculate  interest  and  mort¬ 
gage  payments,  process  stock 
trades  and  access  account  inform  a- 
tion.  Without  reliable  systems,  inte  r- 
est  could  be  miscalculated,  stock 
trades  could  vanish,  and  customers 
could  have  difficulty 
accessing  their 
account  balances  or 
using  their  credit  or 
debit  cards.  Such 
problems,  even  if 
only  temporary,  could 
create  the  type  of 
uncertainty  and 
chaos  that  has  been 
responsible  for  major 
economic  downturns  in  the  past. 
Therefore,  it  is  important  not  only  to 
assure  that  the  computer  systems  in 
this  industry  are  remediated  and 
tested,  but  that  financial  services  o  r- 
ganizations  avoid  consumer  panic  by 
communicating  effectively  with  cu  s- 
tomers  and  business  partners. 

As  a  result  of  early  attention  to  the 
problem  and  significant  regulatory 


and  Congressional  oversight,  the  f  i- 
nancial  services  sector  ranks  ahead 
of  virtually  all  other  industries  in  its 
remediation  and  testing  efforts. 

Even  in  this  sector,  however,  much 
additional  work  will  be  required,  pa  r- 
ticularly  in  the  areas  of  contingency 
planning,  and  international  oper  a- 
tions  and  information  exchange. 


MAJOR  INITIATIVES 


Regulatory  Survey 

In  February  and  again  in  April  1997, 
both  Senators  Bennett  and  D’Amato 
cosigned  letters  to  each  of  the  six 
federal  financial  institution  regulatory 
agencies  asking 
that  they  provide 
information  about 
the  Y2K  readiness 
of  their  own 
computer  systems 
as  well  as  those  in 
the  industry  sectors 
under  their 

supervision.  The  re¬ 
sponses  raised 
serious  questions 
about  Year  2000  readiness  in  the 
financial  services  sector  and  the 
Chairman  decided  to  use  the  hearing 
process  to  investigate  fu  rther. 

Hearings 

July  10.  1997:  HEARING  ON 

FINANCIAL  SERVICES  AND  THE 
YEAR  2000  PROBLEM 


A  CONSUMER  LOSS  OF  FAITH 
IN  EITHER  THE  SOUNDNESS  OF 
THEIR  INVESTMENTS  OR  THEIR 
FINANCIAL  SERVICE 
PROVIDERS  COULD  THROW 
THE  ECONOMY  INTO  TURMOIL 
EVEN  WITHOUT  MAJOR  Y2K 
DISRUPTIONS 
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In  the  first  hearing,  the  Subcommi  t- 
tee  solicited  testimony  from  a  variety 
of  individuals  experienced  in  working 
with  the  Y2K  issue.  The  issues 
raised  in  this  first  hearing  would 
reemerge  consistently  throughout 
the  following  hearings. 


Highlights: 


Large  banks 

started  their  Y2K 
preparations  well  in 
advance  of  other 
industry  sectors.  However,  inte  r 
dependency,  industry  consolid  a- 
tion,  external  vendor  reliance  and 
a  greater  proportion  of  mission- 
critical  systems  makes  the  fina  n- 
cial  services  industry  particularly 
susceptible  to  Y2K  pro  blems. 


The  "silver  bullet" 

THAT  DEFEATS  THE  Y2K 
PROBLEM  IS  NOT 
TECHNOLOGY,  BUT  SOLID 
PROJECT  MA  NAGEMENT. 


•  The  "silver  bullet"  that  defeats  the 
Y2K  problem  is  not  technology, 
but  solid  project  management. 
This  includes  engaging  in  triage 
to  identify  mission-critical  sy  s- 
tems  and  contingency  planning, 
especially  in  smaller  institutions 
or  those  bodies  that 
have  yet  to  initiate 
Y2K  remediation. 
Time  for  a  complete 
Y2K  fix  is  rapidly  d  i- 
minishing. 


Although  the  hearing 
on  U.S.  Financial  Institutions  and 
Federal  Regulatory  Agencies  Ma  n- 
agement  of  the  Year  2000  Computer 
Problem  had  already  been  sche  d- 
uled  for  July  30,  the  July  10  hearing 
affirmed  the  Subcommittee's  concl  u- 
sion  that  regulators  would  play  a 
critical  role  in  Y2K  prepare  dness. 


•  The  panel  endorsed  direct  and 
immediate  federal  and  regulatory 
action.  The  Bank  Administration 
Institute  was  given  as  an  exa  tri¬ 
ple  of  how  industry  groups  could 
positively  support  the  Y2K  effort. 
As  one  panelist  stated,  the  Year 
2000  has  the  potential  of  falling 
prey  to  the  tragedy  of  the  co  m- 
mons — it  is  everyone's  problem, 
therefore  few  are  willing  to  take 
responsibility  for  it. 

•  Businesses  have  a  special  r  e- 
sponsibility  to  inform  the  public  of 
their  Y2K  preparedness.  Loss  of 
faith  by  consumers  in  either  the 
soundness  of  their  investments  or 
their  financial  service  providers 
could  throw  the  economy  into 
turmoil  even  without  major  Y2K 
disruptions. 


FINANCIAL 

INSTITUTIONS.  AND 

FEDERAL 

REGULATORY 

AGENCIES 

MANAGEMENT  OF 

THE  YEAR 

2000  COMPUTER 

PROBLEM 

As  a  result  of  the  letters  sent  by 
Senators  D'Amato  and  Bennett  in 
February  and  April  of  1997,  the 
heads  of  the  six  financial  institution 
regulatory  agencies  were  prepared 
to  address  the  concerns  of  the  Su  b- 
committee.  While  the  Office  of  Thrift 
Subervision  (OTS)  claimed  it  could 
trace  Y2K  concerns  back  to  thrift  e  x- 
aminations  in  1994  and  the  Gove  r- 
nors  of  the  Federal  Reserve  Board 
(FRB)  pointed  to  the  consolidation  of 
the  FRB  mainframe  5  years  ago  as 
the  beginning  of  the  FRB's  Y2K 
awareness,  most  agencies  started 
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to  actively  engage  the  Y2K  issue  in 
June  1996  in  response  to  a  Federal 
Financial  Institutions  Examination 
Council  statement.  This  statement 
"strongly  encouraged  depository  i  n- 
stitutions  to  complete  an  inventory  of 
core  computer  functions  and  to  set 
priorities  for  compliance  changes, 
keeping  in  mind  that 
testing  should  be 
underway  for  mission- 
critical  systems  by 
December  31,  1998." 

Almost  a  year  later,  in 
May  1997,  FFIEC 
issued  a  second 
statement  which 
provided  some 

guidance  for  banks  and  examiners 
on  Y2K  project  management.  A  n- 
other,  more  detailed  guidance 
statement  was  issued  in  December 
1997. 

Highlights: 


tee  warned  that  information  held 
by  regulators,  and  not  appropri¬ 
ately  distributed  to  the  public 
promptly,  would  increase  the  lik  e- 
lihood  of  panic. 


Information  not 

APPROPRIATELY 
DISTRIBUTED  TO  THE 
PUBLIC  IN  A  TIMELY 
MANNER  WILL  INCREASE 
THE  LIKELIHOOD  OF 
PANIC. 


The  securities  industry  also  d  e- 
fended  its  current  disclosure 
laws,  while  suggesting 
that  individual 

consumers  and 

investors  would  most 
influence  disclosure. 
Arthur  Levitt,  Jr.  of  the 
Securities  and 

Exchange  Commission 
(SEC)  claimed  that 
current  laws  in  place 
were  "sufficient  at  this  time  to 
cover  reporting  obligations  co  n- 
cerning  any  material  impact  of 
the  Year  2000  on  operations  or 
costs."  Moreover,  "market  forces 
are  such  that  there  is  no  regul  a- 
tory  action  that  would  be  as  s  e- 
vere  as  the  reaction  of  the  ma  r- 


•  While  examination  information  is 
confidential  by  law,  the  Subco  m- 
mittee  asked  the  regulators  to 
consider  ways  in  which  they 
could  disclose  Y2K  preparedness 
levels  to  the  public.  As  a  whole, 
the  regulators'  opinion  fell  to  the 
side  of  maintaining  the  status 
quo.  Defining  Y2K  as  a  safety 
and  soundness  issue,  regulators 
argued  that  the  examination  re¬ 
sults  should  remain  confidential 
in  accordance  with  current  law. 
Financial  institutions  that  fail  to 
comply  with  Year  2000  regulatory 
guidelines  will  be  subject  to  fo  r- 
mal  enforcement  actions  which, 
in  contrast  to  examination  re¬ 
ports,  the  regulators  are  required 
to  publish  by  law.  The  Commi  t- 


ketplace." 

•  Senators  Bennett  and  Dodd  pr  e- 
sented  the  idea  of  "safe  harbor" 
legislation  that  would  encourage 
institutions  to  focus  on  fixing  the 
Y2K  problem  by  offering  some 
protection  from  Y2K  liability  for 
companies  that  demonstrate  Y2K 
due  diligence.  The  panel  was 
reluctant  to  comment  on  an  u  n- 
written  bill,  but  generally  ind  i- 
cated  that  self-interest  should  be 
sufficient  encouragement  to  ad¬ 
dress  Y2K  problems. 

While  commending  the  agencies'  e  x- 
cellent  Y2K  efforts,  the  senators  r  e- 
quested  regular  progress  reports , 
especially  to  address  certain 
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weaknesses  identified  in  the  hearing. 
Two  such  areas  were  the  under¬ 
preparedness  of  small  institutions 
and  international  institutions.  Sen  a- 
tor  Dodd  also  took  the  occasion  to 
disagree  with  the  SEC’s  view  on  di  s- 
closure,  stating,  "by  the  time  the 
market  reacts... we  may  have  a 
problem  on  our  hands." 

OCTOBER  22.  1997:  HEARING  ON 
THE  YEAR  2000  LIABILATY  AND 
DISCLOSURE 

Continuing  the  debate  on  liability  and 
disclosure  that  started  in  the  prev  i- 
ous  hearing,  the  October  22  hearing 
sought  the  perspective  of  a  different 
set  of  witnesses:  two  lawyers  int  i- 
mately  involved  in  Y2K,  the  president 
of  Information  Technology  Associ  a- 
tion  of  America  whose  constituents 
may  have  significant  Y2K  liability  e  x- 
posure,  and  a  professional  inves  t- 
ment  analyst.  The  Chairman  co  n- 
sidered  the  need  to  protect  comp  a- 
nies  from  excessive  Y2K-related  lit  i- 
gation,  balanced  with  a  concern  that 
public  companies  did  not  adequately 
disclose  their  Y2K  efforts.  The  D  i- 
rector  of  the  Division  of  Corporate 
Finance  for  the  SEC  was  asked  to 
respond  to  this  last  criticism,  esp  e- 
cially  in  light  of  Senate  Bill  1518, 
which  would  require  specific  Y2K 
disclosure  for  public  co  mpanies. 

Highlights: 

•  Corporations  could  face  liability 
risks  from  a  range  of  sources  at 
an  aggregate  cost  of  $1  trillion. 
The  degree  to  which  protection 
from  litigation  may  be  needed  or 
warranted  is  unclear.  Sugges¬ 
tions  included  prohibiting  punitive 


damage  awards  in  Y2K-related 
cases  amending  the  Copyright 
Act  to  allow  businesses  to  adapt 
software  without  acquiring  I  i- 
censes,  and  adapting  a  safe  ha  r- 
bor  law  which  would  provide 
some  liability  protection  upon  the 
businesses'  good  faith  pursuit 
and  implementation  of  a  Year 
2000  remediation  plan. 

•  It  was  reported  that  institutions 
are  severely  constrained  from 
sharing  Y2K-related  information 
and  possible  solutions  due  to  I  i- 
ability  concerns.  "They  [bus  i- 
nesses]  are  very  concerned 
about  leaving  a  smoking  gun  in 
the  file  where  they  may  be  seen 
as  instructing  another  party  as  to 
what  it  takes  to  interface  with 
their  systems  and,  falling  short, 
they  may  have  missed  some¬ 
thing."  (President  of  LaBoeuf 
Computing  Technologies,  Inc.) 

•  Banks  and  insurance  agencies 
can  pressure  businesses  to  ad¬ 
dress  Y2K  issues  by  factoring 
Y2K  preparedness  into  applica¬ 
tions  for  credit  or  insurance  co  v- 
erage.  Banks  have  started  to 
consider  Y2K  risk  in  credit  appli¬ 
cations,  but  have  not  yet  disco  v- 
ered  a  solution  for  Y2K  exposure 
in  their  loan  portfolios.  Due  to  a 
soft  market,  Property  and  Cas  u- 
alty  insurers  have  been  much 
slower  to  factor  Y2K  into  insu  r- 
ance  coverage.  However,  rei  n- 
surers  are  excluding  Year  2000 
liability  in  their  reinsurance  tre  a¬ 
ties. 

•  The  SEC  reiterated  its  position 
that  current  guidelines  are 
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sufficient  to  compel  Y2K  disci  o- 
sure,  while  acknowledging  the 
need  for  further  awareness.  A  c- 
cording  to  the  SEC  representa¬ 
tive,  ”[t]here  appears  to  be  a 
problem  in  the  sense  that  we 
aren't  getting  as  many  disci  o- 
sures  as  we  would  expect. .  .there 
is  a  concern  that  companies  may 
not  understand  that  this  is  a  n- 
other  issue  that's  impacted  by  the 
federal  securities  laws." 


The  Chairman  finished  the  hearing 
by  informing  the  Subcommittee  of 
the  results  of  a  GAO  report  asses  s- 
ing  the  National  Credit  Union  Ass  o- 
ciation  (NCUA).  The  report,  r  e- 
quested  just  after  the  previous  hea  r- 
ing,  indicated  that  the  NCUA  was  not 
as  far  along  in  its  assessment  of 
Year  2000  compliance  as  the  Office 
of  Management  and  Budget  and 
GAO  guidelines  recommended.  He 
encouraged  the  NCUA  to  accelerate 
its  Y2K  activities,  and  warned  the 
other  regulatory  agencies  that  GAO 
would  visit  them  soon. 


MANDATING 

YEAR 

2000 

DISCLOSURE 

BY 

PUBLICLY 

TRADED  COMPANIES 


The  fourth  hearing  of  the  Subco  m- 
mittee  featured  the  testimony  of  E  d- 
ward  Yardeni,  Chief  Economist  at 
Deutsch  Morgan  Grenfell.  The 
hearing  was  one  of  many  steps 
taken  to  pressure  public  companies 
to  provide  greater  Y2K  disclosure. 
Yardeni,  who  gave  an  estimated 
40%  chance  of  a  worldwide  rece  s- 
sion  in  2000  lasting  at  least  12 
months,  felt  very  strongly  that  a  new, 
comprehensive  disclosure  law  was 


necessary.  In  his  testimony  he 
stated,  "The  current  disclosure  sy  s- 
tem  simply  will  not  provide  policy¬ 
makers  with  the  information  they 
need  as  soon  as  possible  to  antic  i- 
pate  and  to  prepare  for  plausible 
worst-case  scenarios." 

FEBRUARY  10.  1998:  HEARING 
ON  FDIC’S  YEAR  2000 
PREPAREDNESS 


The  fifth  hearing  of  the  Subcommi  t- 
tee  provided  a  public  forum  for  e  x- 
amining  the  results  of  GAO's  as¬ 
sessment  of  the  Federal  Deposit  I  n- 
surance  Corporation’s  Y2K  efforts. 
While  the  report  noted  that  the  FDIC 
had  made  significant  strides  in  its 
Year  2000  project,  it  still  lagged  b  e- 
hind  OMB  and  GAO  guidelines.  The 
FDIC  acknowledged  its  shortco  til¬ 
ings  and  provided  the  Subcommittee 
with  details  regarding  its  ongoing 
and  future  Y2K  efforts.  The  Su  b- 
committee  discussed  the  idea  of  a 
"drop  dead"  (i.e.,  shutdown)  date  for 
noncompliant  institutions  and  the 
need  to  provide  customers  with 
meaningful  disclosure  on  their  banks’ 
Y2K  readiness. 

FEBRUARY  17.  1998:  FIELD 

HEARING  IMPLICATIONS  OF  THE 
YEAR  2000  COMPUTER  PROBLEM 


Senator  Dodd  chaired  the  sixth 
hearing  in  Hartford,  Connecticut  to 
illustrate  the  breadth  and  pervasiv  e- 
ness  of  the  Y2K  problem.  Seven 
witnesses  described  their  Y2K  pro¬ 
grams  and  the  implications  for  their 
customers  in  a  variety  of  areas,  i  n- 
cluding  banking,  insurance,  medical 
facilities  and  airway  transportation. 
Participants  reaffirmed  the  inte  r- 
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dependent  nature  of  business  and 
encouraged  consumers  to  ask  their 
product  and  service  providers  about 
their  Y2K  efforts. 

MARCH  18.  1998:  HEARING  ON 
OFFICE  OF  THRIFT  SUPERVISION 
YEAR  2000  PREPAREDNESS 

The  Subcommittee  heard  a  positive 
report  from  GAO  on  OTS's  Y2K  e  f- 
forts,  with  particular  praise  directed 
at  OTS's  internal  systems  work.  The 
OTS  was  criticized  for  not  having 
completed  its  conti  n- 
gency  plans,  and  ig¬ 
noring  the  interrel  a- 
tionships  between  its 
internal  systems. 

However,  the  OTS 
had  improved  on 
NCUA's  and  FDIC's 
initial  member  as¬ 
sessments,  and  therefore  had  a 
better  base  from  which  to  determine 
its  regulated  entities’  preparedness 
levels.  At  the  time,  OTS  estimated 
less  than  22%  of  its  regulated  ent  i- 
ties  "needed  improvement"  and 
around  1%  were  "unsatisfactory"  in 
their  Y2K  efforts. 

During  the  course  of  the  hearing  the 
Chairman  asked  whether  the  FFIEC 
had  become  a  bottleneck  for  info  r- 
mation.  Although  the  OTS  repr  e- 
sentative  hesitated  to  agree,  she  did 
mention  that  the  OTS  would  issue  its 
own  testing  guidance  in  the  following 
weeks,  and  contingency  planning 
guidance  toward  the  end  of  April. 

JUNE  10.  1998:  HEARING  ON 
DISCLOSING  YEAR  2000 
READINESS 


On  June  10,  1998,  Chairman 

Bennett  called  the  SEC  back  to  the 
witness  table  to  report  on  the  pro  g- 
ress  of  its  efforts  to  improve  Y2K 
disclosure  among  publicly  traded 
corporations.  After  the  introduction 
of  Senate  Bill  1518,  the  Computer 
Remediation  and  Shareholder 
(CRASH)  Protection  Act,  the  SEC 
requested  the  opportunity  to  address 
the  problem  of  disclosure  on  its  own, 
without  additional  legislation.  In  the 
months  that  followed,  the  SEC  a  t- 
tempted  to  improve  the  quality  of 
disclosure  by  educating 
publicly  traded  compa¬ 
nies  about  their  obliga¬ 
tions  under  existing  law. 
Unfortunately,  the  SEC's 
efforts  were  only  mod¬ 
erately  successful.  The 
SEC  and  other  expert 
witnesses  agreed  that 
while  the  quantity  of  disclosure  i  im¬ 
proved,  the  quality  did  not. 

Highlights: 

•  The  SEC  reiterated  its  commit¬ 
ment  to  improving  Year  2000  di  s- 
closure.  It  promised  to  heighten 
its  efforts  by  releasing  specific 
guidance  on  Y2K  disclosure. 
This  interpretive  release  "may 
form  the  basis  of  enforcement 
action  regarding  their  Year  2000 
issues,"  and  "will  remedy  the  a  p- 
parent  misconception  that  costs 
relating  to  fixing  Year  2000  pro  b- 
lems  must  be  disclosed  only  if 
these  costs  are  material.  It  will 
clarify  that  companies  must  d  e- 
termine  materiality  based  on  the 
potential  consequences  of  their 
failure  to  resolve  their  Year  2000 
readiness." 


The  SEC  and  other 

EXPERT  WITNESSES 
AGREED  THAT  WHILE  THE 
QUANTITY  OF 
DISCLOSURES  IMPROVED , 
THE  QUALITY  DID  NOT. 
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•  Supporting  the  need  for  better 
disclosure,  Triaxsys  Research 
provided  the  Subcommittee  with 
statistics  from  a  survey  of  the 
largest  250  publicly  held  comp  a- 
nies.  As  of  April  17,  1998,  nearly 
half  of  these  companies  di  s- 
closed  no  information,  or  so  little 
information  that  it  was  impossible 
to  glean  anything  meaningful 
about  their  Y2K  progress.  An¬ 
other  witness  observed  that  the 
Y2K  disclosure  of  many  institu 
tions  looked  as  if  lawyers  had 
heavily  edited  them.  "Clearly, 
corporations  have  vio¬ 
lated  the  SEC  guideline 
requiring  specifics  rather 
than  boilerplates." 


themselves  to  Senator  Kyi,  who  is 
the  Chairman  of  the  Judiciary  Su  b- 
committee  on  Technology,  Terro  r- 
ism,  and  Government  Information  for 
further  discussion. 


ASSESSING  THE 

YEAR 

2000 

PREPAREDNESS 

OF  FOREIGN 

COUNTRIES  AND 

DETERMINING 

JUST  WHERE  AND  HOW 

THE 

UNITED  STATES 

MAY 

BE 

•  The  Subcommittee  dis¬ 
cussed  the  possibility  of 
changing  the  incentive 
structure  so  that  comp  a- 
nies  would  be  biased  to¬ 
ward  the  disclosure  of 
information.  Disince  n- 
tives,  such  as  the  use  of 
disclosed  information 
against  a  company  in  litigation, 
abound.  Tying  limits  on  Y2K  I  i- 
ability  and  litigation  to  disclosure 
of  information  and  efforts  to  fix  a 
company’s  problem  may  be  one 
way  to  neutralize  the  disincen¬ 
tives  to  disclose. 

Although  not  directly  within  the 
scope  of  the  Subcommittee’s  juri  s- 
diction,  the  hearing  finished  with  a 
debate  on  the  pros  and  cons  of  pr  o- 
viding  liability  protection  to  corporate 
boards  and  senior  management. 
The  Chairman  requested  that  the 
participating  legal  experts  avail 


Clearly, 

CORPORATIONS 
HAVE  VIOLATED 
THE  SEC 
GUIDELINES 
REQUIRING 
SPECIFICS  RATHER 
THAN  BOILER¬ 
PLATES. 


VULNERABLE 

In  this  hearing,  representatives  from 
the  U.S.  financial  services  arena 
_  confirmed  that  interna¬ 
tional  preparedness 
poses  a  real,  but  unqua  n- 
tified,  risk  to  U.S.  compa¬ 
nies.  Witnesses  could 
point  to  such  international 
efforts  as  the  Joint  Year 
2000  Council  (sponsored 
jointly  through  the  Basle 
Committee,  the  G-10 
Central  Bank  Governors' 
Committee  on  Payment 
and  Settlement  Systems, 
the  International  Associ  a- 
tion  of  Insurance  Supervisors,  and 
the  International  Organization  of  S  e- 
curities  Commissions),  but  little  ta  n- 
gible  information  was  available.  The 
few  pieces  that  were  available  were 
disheartening.  Quoting  a  Moody's 
investment  report,  one  witness  noted 
that  49  Japanese  banks  planned  to 
spend  $249  million  as  a  group  on 
Y2K  compliance.  This  amount  is 
only  a  fraction  of  Citicorp's  planned 
$600  million  program. 


SEPTEMBER  17.  1998:  HEARING 
ON  Y2K  AND  PENSIONS  AND 
MUTUAL  FUNDS 
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Since  pension  and  mutual  funds  are 
the  primary  vehicle  through  which 
Americans  invest  in  the  stock  ma  r- 
ket,  the  Committee  held  a  hearing  on 
fund  managers'  efforts  to  address 
the  Year  2000  problem.  The  at¬ 
tending  pension  and  mutual  fund 
company  representatives  reported 
that  their  internal  systems  were  well 
on  their  way  to  compliance.  They 
also  indicated  that  they  were  not  i  m- 
pressed  with  disclosure  efforts  made 
by  public  companies.  However, 
several  witnesses  conceded  that 
many  analysts  as  well  as  fund  ma  n- 
agers  had  just  started  to  include  Y2K 
risk  in  their  evaluation  of  stocks. 
Additionally,  they  emphasized  that 
their  position  required  an  equal 
evaluation  of  all  risk.  Chairman 
Bennett  countered  that  the  Commi  t- 
tee  had  no  intention  of  asking  an  a- 
lysts  to  change  their  evaluation  of 
other  risks.  Instead,  the  Chairman 
warned  that  the  failure  to  inform 
stockholders  of  Y2K  risks  would  r  e- 
sult  in  significant  long-term  risks. 
The  Committee  wanted  to  preserve 
confidence  in  the  market  by  ensuring 
that  analysts  recognized  Y2K  as  an 
important  risk. 

Legislation 

In  the  105th  Congress,  Chairman 
Bennett  introduced  the  following 
three  pieces  of  legislation  to  further 
the  goals  of  Year  2000  readiness  in 
the  financial  services  industry.  D  e- 
tailed  summaries  of  the  bills  are 
found  in  the  Legislation  section  of 
this  report. 

S.  1518,  the  Year  2000  Computer 
Remediation  and  Shareholder 


(CRASH)  Protection  Act  of  1997, 
was  introduced  on  November  10, 

1997. 

S.  1671,  the  Examination  Parity  and 
Year  2000  Readiness  for  Financial 
Institutions  Act,  was  introduced  on 
February  24,  1998. 

S.  2000 ,  was  introduced  on  April  29, 

1998. 

Regulatory  Briefings 

At  the  second  Subcommittee  hearing 
on  July  30,  1997,  Chairman  Bennett 
asked  the  six  federal  financial  inst  i- 
tution  regulatory  agencies  to  report 
back  to  the  Subcommittee  on  a 
regular  basis  on  the  progress  of  Year 
2000  remediation  in  their  own  oper  a- 
tions  and  in  the  industry  sectors  they 
supervise.  Since  that  time,  the  Su  b- 
committee  has  worked  with  the 
House  Banking  Committee  to  esta  b- 
iish  a  regular  schedule  of  quarterly 
briefings.  Each  quarter,  the  regul  a- 
tory  agencies  file  written  reports  with 
the  Subcommittee  on  their  progress 
and  meet  with  Congressional  staff  to 
respond  to  questions  raised  by  the 
reports. 

General  Accounting  Office  Stu  d- 
ies 

In  August  1997,  Chairman  Bennett 
asked  GAO  to  conduct  an  indepen  d- 
ent  review  of  the  Year  2000  rem  e- 
diation  efforts  at  each  of  the  six  f  i- 
nancial  institution  regulatory  age  n- 
cies.  GAO  has  concluded  several  of 
those  reviews  and  has  reported  back 
to  the  Chairman.  The  results  of 
those  reviews  are  incorporated,  as 
appropriate,  in  the  "Assessment" 
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section  of  this  report,  as  well  as  in 
the  hearings  where  the  GAO  re¬ 
ported  its  findings. 


meet  the  OMB's  March  1999  impl  e- 
mentation  date  for  their  mission- 
critical  systems. 


Correspondence  and  Industry 
Outreach 

Chairman  Bennett  maintains  regular 
contact  with  government  officials  and 
industry  representatives  involved  in 
the  Year  2000  remedi  a- 
tion  and  risk  manage¬ 
ment  processes.  These 
contacts  include  both 
formal  speeches  and 
informal  meetings.  He 
has  written  op-ed  pieces 
for  the  New  York  Times, 
involved  himself  heavily 
in  the  Annual  Confer¬ 
ence  on  Financial  Serv¬ 
ices  and  Technology  in 
Utah,  spoken  with  CEOs 
of  top  technology  firms 
at  the  Comdex  convention,  and  a  d 
dressed  the  National  Press  Club, 
among  other  a  ctivities. 


Of  the  institutions 

EVALUATED  UNDER 
THAT  SYSTEM, 
APPROXIMATELY  95% 


RECEIVED 


Very  few  institutions  should  fail  due 
to  lack  of  Y2K  planning.  On-site  e  x- 
aminations  performed  by  four  of  the 
regulators  (FRB,  FDIC,  Office  of  the 
Comptroller  of  the  Currency  and 
OTS)  resulted  in  approximately  95% 
of  institutions  surveyed 
receiving  satisfactory 
ratings.  Less  than  1  % 
of  institutions  surveyed 
received  an  unsatisfac¬ 
tory  rating. 


SATISFACTORY 

ratings.  Fewer 
THAN  1%  OF 


INSTITUTIONS  RECEIVED 
AN  UNSATISFACTORY 
RATING 


Smaller  institutions  are 
more  likely  to  lag  in  their 
preparations.  NCUA, 
which  regulates  a  dis¬ 
proportionate  amount  of 
smaller  institutions,  re¬ 
ports  a  slightly  larger 
percentage  of  unsatisfactory  instit  u- 
tions. 


Subcommittee  and  Special  Commi  t- 
tee  staffs  meet  regularly  with  indu  s- 
try  representatives  to  continually  a  s- 
sess  progress  in  the  se  ctor. 


ASSESSMENTS 


Financial  Institutions  and  Their 
Regulatory  Agencies 

Based  on  GAO  reports  and  constant 
contact  with  industry  representatives, 
the  Committee  feels  comfortable  with 
progress  that  regulators  have  made 
in  remediating  and  testing  their  inte  r- 
nal  systems.  However,  regulators 
must  continue  to  push  themselves  to 


The  Committee  is  pleased  that  the 
regulators  are  considering  the  needs 
of  consumers  in  their  Y2K  prepar  a- 
tions.  Besides  an  FFIEC  release  on 
Year  2000  customer  awareness  pr  o- 
grams,  the  FRB  has  planned  to  i  n- 
crease  the  amount  of  currency  either 
in  circulation  or  in  Federal  Reserve 
vaults  by  approximately  14%  over 
current  levels  by  the  end  of  1999. 
This  inflow  of  currency  will  permit  f  i- 
nancial  institutions  to  provide  the  e  x- 
tra  cash  customers  may  demand 
during  the  century  roll  over. 

Financial  institutions  have  started  to 
evaluate  the  Year  2000  prepare  d- 
ness  of  their  material  customers  and 
include  Year  2000  preparedness 
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in  their  underwriting  and  loan  review 
standards.  This  process  is  just  b  e- 
ginning,  however,  and  there  are  no 
reports  of  customers  being  rejected 
for  loans  or  of  loans  being  down¬ 
graded  as  a  result  of  Year  2000 
questions.  The  Committee  will  e  n- 
courage  the  industry  to  pursue  this 
analysis  in  the  coming  year. 

The  regulators  need  to  develop 
plans  for  when  and  how  they  will 
deal  with  those  institutions  likely  to 
experience  significant  failures  after 
the  millennium  date  change.  On  e  n- 
couragement  from  the  Chairman, 
formal  enforcement  actions  have 
been  taken  where  appropriate.  In 
the  case  of  the  Putnam-Greene  F  i- 
nancial  Corporation,  the  FDIC  and 
FRB  issued  coordinated  cease-and- 
desist  orders  citing  inadequate  Y2K 
preparations.  Continued  monitoring 
is  imperative. 

The  Securities  Industry 

The  securities  industry  has  led  the 
financial  services  sector  in  its  Year 
2000  remediation  efforts. 

The  securities  industry  scheduled 
industry-wide  testing  in  1999,  but  in 
July  1998,  the  Securities  Industry 
Association  (SIA)  conducted  a  re¬ 
hearsal  or  so-called  "beta  test."  In 
testimony  before  the  Special  Co  m- 
mittee  on  September  17,  1998,  Don 
Kittell  of  the  SIA  reported  that  28  s  e- 
curities  firms  participated  in  the  test, 
along  with  13  exchanges  and  se¬ 
lected  utilities.  The  results  of  the 
testing  were  generally  positive  and 
the  firms  were  able  to  process  a 
complete  cycle  of  trades  over  a 
simulated  millennium  date  change. 


The  Committee  remains  positive 
about  these  tests,  although  e  x- 
panded  testing  is  necessary  to  e  n- 
sure  that  more  firms  are  Y2K  ready. 

The  SEC  has  made  a  commendable 
effort  to  promote  Year  2000  prepa  r- 
edness  within  the  securities  industry 
and  keep  investors  informed.  SEC 
initiatives  include: 

•  A  frequently  asked  question 
sheet  on  the  SEC's  web  site 
containing  a  list  of  frequently 
asked  Y2K  questions  for  inve  s- 
tors. 

•  Numerous  statements  to  publicly 
traded  companies,  broker- 
dealers,  and  investment  advisers 
to  promote  disclosure  of  Year 
2000  information.  (Available  at 
www.sec.gov.) 

As  a  result  of  an  early  and  vigorous 
start,  the  securities  industry  is  well 
positioned  for  the  Year  2000. 

Failures 

The  reality  of  information  technology 
is  that  glitches  can  occur  without 
user  discovery  until  well  after  the 
fact.  A  case  in  point  is  the  recent 
failure  of  a  data  collection  company 
for  the  financial  services  industry. 
Portions  of  the  firm’s  database  were 
processed  using  the  old  MS-DOS 
operating  system.  This  was  not  Y2K 
compliant.  When  January  1999 
rolled  around  the  system  assumed 
“9”  meant  end  of  file,  a  common  pr  o- 
grammer  protocol  for  older  systems. 
Fund  managers  receiving  this  data 
encountered  an  array  of  N/As  spri  n- 
kled  throughout  the  data  tables 
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that  list  financial  metrics  such  as 
cumulative  return  rates,  12-month 
yields  and  price-to-book  ratios.  In 
fact  these  were  indications  that 
January  1999  data  were  not  i  n- 
cluded.  The  benchmark  S&P  500  in¬ 
dex  was  incorrect.  Some  customers 
were  not  notified  about  the  problem 
until  three  weeks  later.  If  financial 
decisions  were  made  based  on  i  im¬ 
precise  data,  then  potential  negative 
consequences  could  have  resulted. 
This  example  is  an  indication  of  the 
kind  of  problems  that  can  befall  the 
financial  industry  where  seemingly 
trivial  mistakes  can  have  undesirable 
consequences. 

Retirement  and  Mutual  Funds 

Retirement  and  mutual  funds,  though 
regulated  by  separate  entities  (the 
Pension  and  Welfare 
Benefits  Administration 
(PWBA)  and  the  SEC, 
respectively),  face 
similar  Y2K  problems. 

Testimony  before  the 
Special  Committee  re¬ 
vealed  that  both 
groups  have  focused 
more  on  preparing 
their  own  internal  systems  than 
evaluating  their  external  exp  osure. 


tual  fund  providers.  Initiatives  i  n- 
clude  the  following: 

•  PWBA  published  a  pamphlet  e  n- 
titled,  “Fiduciary  Questions  and 
Answers  about  the  Year  2000.” 
(Available  at  1-800-998-7542  or 
www.dol.gov/dol/pwba .) 

•  The  SEC  has  worked  with  the  I  n- 
vestment  Company  Institute  (ICI) 
to  monitor  progress.  An  ICI  su  r- 
vey  revealed  that  80%  of  re¬ 
sponding  mutual  fund  companies 
expected  to  finish  internal  rem  e- 
diation  by  year  end  1998. 

However,  considerably  more  effort  is 
necessary  to  convince  investment 
advisers  from  both  groups  that  por  t- 
folios  should  be  examined  for  Y2K 
risk,  and  that  Y2K  risk  should  be  di  s- 
closed  to  underlying  in¬ 
vestors. 

An  investment  in  a  co  m- 
pany  that  may  not  be 
Year  2000  compliant 
could  be  detrimental  to 
plan  participants  and 
consequently  expose 
the  plan  fiduciary  to  I  i- 
ability.  Therefore,  the  Special  Co  m- 
mittee  has  urged  all  pension  plans  to 
evaluate  their  inves  tments. 


In  third  quarter 

RESULTS  TABULATED  BY 
THE  SEC,  10%  OF 
15,000  COMPANIES 
FAILED  TO  DISCLOSE 
THEIR  YEAR  2000 
COSTS. 


Some  pension  and  mutual  fund 
plans  have  undertaken  comprehe  n- 
sive  Y2K-specific  surveys  of  the 
companies  in  which  they  invest. 
However,  many  others  have  been 
slow  to  incorporate  Y2K  exposure 
into  their  evaluation  of  inves  tments. 

The  Committee  recognizes  that 
regulators  have  not  been  silent  on 
the  Y2K  issue  for  pension  and  m  u- 


Publicly  Traded  Corporations 

The  Committee  is  disappointed  to 
report  that  despite  substantial  i  m- 
provement  in  the  number  of  public 
companies  now  mentioning  Y2K  in 
their  SEC  disclosures,  very  few 
companies  have  provided  the  type  of 
meaningful  disclosure  necessary  to 
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assess  the  potential  impact  of  Y2K 
on  their  business. 

Having  studied  the  problem,  the 
Committee  agrees  with  economist 
Edward  Yardeni,  who  testified  that 
the  Year  2000  problem  would  have  a 
material  impact  on  companies  that 
do  not  make  adequate  Y2K  prepar  a- 
tions. 

While  data  suggests  that  many  U.S. 
companies,  especially  large  corpor  a- 
tions,  are  working  diligently  to  ad¬ 
dress  their  Y2K  issues,  companies 
appear  to  be  avoiding  Y2K  disci  o- 
sure  by  taking  the  position  that  either 
1)  Y2K  will  not  have  a  material  i  m- 
pact  on  them,  2)  it  is  too  early  to  a  s- 
sess  the  possible  impact  of  Y2K  fai  I- 
ures,  3)  such  disclosure  would  reveal 
proprietary  information  and/or  place 
them  at  a  disadvantage  against 
competitors,  or  4)  their  counsel  had 
advised  them  to  share  as  little  info  r- 
mation  as  possible  while  still  co  m- 
plying  with  the  letter  of  the  law. 

Whether  the  situation  will  improve  in 
the  remaining  reporting  periods  re¬ 
mains  unclear.  Failing  to  address 
Y2K  exposure  could  have  a  disa  s- 
trous  effect  on  a  company,  and  fu  r- 
ther  pressure  may  be  needed  to  en¬ 
sure  that  public  companies  disclose 
that  risk  to  investors. 


CONCERNS 


International 

Financial  services  firms  in  the  United 
States  are  linked  closely  to  their 
counterparts  in  other  parts  of  the 
world  through  electronic  transa  c- 


tions.  U.S.  firms  operating  around 
the  world  also  must  rely  on  tel  e- 
communications  and  power  services 
in  foreign  countries  in  order  to  tran  s- 
act  business.  As  a  result,  even  if 
U.S.  financial  services  firms  have 
converted  their  own  systems  su  c- 
cessfully,  they  still  face  enormous 
international  risk.  Experts  testifying 
before  the  Subcommittee  and  Sp  e- 
cial  Committee  consistently  have 
stressed  that  while  there  is  much  u  n- 
certainty  about  Year  2000  readiness 
around  the  world,  one  fact  is  clear  — 
most  foreign  countries  lag  behind  the 
U.S.  in  their  conversion  activities. 

Senator  Bennett  has  urged  financial 
services  firms  and  their  regulators  to 
assess  the  Year  2000  situation  of  the 
countries  in  which  they  operate  and 
to  develop  contingency  plans  to  mit  i- 
gate  the  effects  of  failure  in  those 
jurisdictions.  The  Special  Committee 
also  has  asked  the  GAO  to  assess 
the  Year  2000  situation  abroad. 
That  study  is  ongoing  at  this  time. 

Contingency  Planning 

With  their  remediation  efforts  on 
track,  financial  services  companies 
must  now  address  the  more  complex 
issue  of  contingency  planning.  Firms 
have  been  slow  to  address  this  issue 
as  a  result  of  competing  priorities 
and  the  lack  of  meaningful  inform  a- 
tion  about  the  Year  2000  readiness 
of  outside  companies  and  other 
sectors.  Nevertheless,  financial 
services  firms  and  their  regulators 
must  plan  for  how  they  will  maintain 
their  operations  if  unexpected  fai  I- 
ures  occur.  Financial  services  firms 
are  particularly  vulnerable  to  power 
or  telecommunications  failures  as 
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well  as  to  the  risk  that  a  material 
customer  or  business  partner  will  fail, 
as  a  result  of  the  computer  pro  b- 
lems,  to  meet  its  obligations.  The 
Special  Committee  plans  to  question 
financial  services  firms  about  their 
contingency  planning  efforts  in  1999. 

Disclosure 

Promoting  meaningful  disclosure  of 
companies’  Year  2000  readiness  has 
been  the  cornerstone  of  Senator 
Bennett's  efforts.  Without  meanin  g- 
ful  disclosure,  it  is  impossible  for 
firms  to  properly  assess  their  own 
risks  and  develop  necessary  conti  n- 
gency  plans.  Disclosure  is  also  i  im¬ 
portant  in  the  context  of  congres¬ 
sional  oversight.  The  Special  Co  m- 
mittee  will  continue  to  promote  this 
important  goal  in  1999. 

Cost 

According  to  disclosure  reports  filed 
by  financial  services  firms  in  recent 
months,  the  costs  of  Year  2000 
compliance  are  rising.  Most  comp  a- 
nies  have  found  that  while  the  cost  of 
remediation  has  flattened  out,  the 
costs  of  contingency  planning  ex¬ 
ceed  their  estimates.  Based  on 
these  results,  it  is  possible  that  the 
cost  of  remediation  could  have  a 
negative  impact  on  earnings  in  the 
financial  services  sector.  D  e- 
pressed  earnings  in  the  financial 
services  sector  could  adversely  i  im¬ 
pact  the  U.S.  economy. 

Third  Party  Relationships 

While  financial  services  companies 
lead  many  other  industries  in  the 
conversion  and  testing  of  their  own 


systems,  they  are  just  beginning  to 
assess  and  manage  the  risks  attri  b- 
utable  to  third  party  relationships. 
Financial  institutions  must  assess 
the  Year  2000  readiness  of  their 
material  customers  in  order  to  avoid 
suffering  major  loan  losses.  Mutual 
funds  and  pension  funds  must  co  n- 
sider  the  readiness  of  their  portfolio 
companies  in  order  to  guard  against 
unnecessary  and  foreseeable  losses 
and  shield  themselves  from  the  I  i- 
ability  associated  with  those  losses. 
The  process  of  examining  the  Year 
2000  preparedness  of  third  parties 
has  been  hindered  somewhat  by  the 
lack  of  substantive  disclosure.  The 
SEC's  Interpretive  Ruling  and  the 
passage  of  the  Information  Read  i- 
ness  and  Disclosure  Act  should 
make  the  information  necessary  for 
such  an  analysis  more  avai  lable. 

Security 

Financial  service  providers  have 
shipped  massive  quantities  of  code 
to  overseas  correcting  facilities.  In 
the  process,  core  legacy  systems 
have  been  mapped  and  doc  u- 
mented.  This  brings  some  real 
benefit  to  institutions  that  may  have 
otherwise  been  ignorant  of  the  inner 
workings  of  their  own  systems.  U  n- 
fortunately,  it  also  provides  the  o  p- 
portunity  for  unscrupulous  individuals 
to  learn  about  the  inner  workings  of 
corporations’  security  systems. 

Additionally,  the  Committee  is  co  n- 
cerned  about  the  potential  for  code 
tampering  during  the  remediation 
process.  A  British  computer  society 
claims  that  some  code  returned  from 
overseas  processing  already  has 
been  found  to  contain  “trap 
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doors,”  or  secret  electronic  entry 
points  into  a  computer  system.  Trap 
doors  could  be  implanted  by  pro¬ 
grammers  during  Y2K  remediation 
and  then  accessed  at  a  later  date, 


once  the  unsuspecting  company  is 
running  on  its  new,  “cleaned”  data. 
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GENERAL  GOVERNMENT 


EMERGENCY 

PREPAREDNESS 


Overview 

When  an  individual  is  confronted  by 
a  personal  emergency  in  the  United 
States,  he  or  she  can  be  confident 
that  any  911  call  for  assistance  will 
be  answered  promptly,  and  that  a 
competent  authority  will  respond 
rapidly.  Y2K  presents  two  essential 
threats  to  our 
emergency  service 
and  disaster  pre¬ 
paredness  agen¬ 
cies.  First,  it 
threatens  to  inter¬ 
rupt  the  ability  to 
properly  process 
and  respond  to 
calls  for  assis¬ 
tance.  This  threat 
is  present  at  all 
levels,  from  the  potential  interruption 
to  a  citizen’s  call  for  fire  or  police  as¬ 
sistance  to  delays  in  a  state’s  ability 
to  request  emergency  or  disaster  as¬ 
sistance  from  the  federal  govern¬ 
ment.  Second,  due  to  lack  of  expe¬ 
rience  with  anything  like  the  possible 
affects  of  the  disruptions  we  may 
face,  it  presents  a  novel  challenge  to 
those  who  must  devise  Y2K  emer¬ 
gency  response  strategies  unlike 
those  they  have  formulated  in  the 
past. 

Most  911  emergency  dispatch  cen¬ 
ters,  known  as  Public  Safety  An¬ 


swering  Points  (PSAP),  are  highly 
automated,  particularly  in  the  case  of 
enhanced  911  systems.  Enhanced 
911  systems  are  those  which  auto¬ 
matically  provide  the  caller's  location 
and  phone  number  to  the  911  op¬ 
erator.  According  to  the  FCC,  the 
Association  of  Public  Safety  Com¬ 
munications  Officials  (APCO)  has 
identified  50  pieces  of  equipment 
within  a  PSAP  that  have  Y2K  vulner¬ 
abilities.  There  are  approximately 
4,500  PSAPs  located  throughout  the 
United  States. 

Modern  emergency 
dispatch  facilities 
often  incorporate 
sophisticated 
Computer-Aided 
Dispatch  (CAD) 
systems  into  their 
operations.  CAD 
systems  provide 
important  benefits 
to  public  safety 
communication  systems,  including: 

•  improved  call-taking  service  to 
the  public, 

•  provision  of  greater  accuracy,  ef¬ 
ficiency,  and  speed  in  responding 
to  calls  for  service, 

•  enhanced  officer  safety  by  pro¬ 
viding  detailed  information  on  call 
locations,  and 

•  increased  officer  productivity  and 
resource  management  and  provi¬ 
sion  of  additional  system  capacity 
due  to  growth  or  crisis. 


“There  are  things  that  can 

SPAWN  PANIC  AND  PANIC 
DOESN’T  HELP  PREPARATION. 

We  need  to  prepare,  not 

PANIC." 

Senator  Gordon  Smith 
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CAD  systems  are  especially  vul¬ 
nerable  to  Year  2000  problems  due 
to  the  fact  that  they  perform  time  and 
date  calculations  on  the  time  an  ini¬ 
tial  call  for  assistance  was  received, 
when  a  unit  was  dispatched,  the  time 
that  it  arrived  and  how  long  it  took  to 
resolve  the  emergency.  These  sys¬ 
tems  are  in  widespread  use  in  all  ar¬ 
eas  of  local  emergency  service,  in¬ 
cluding  police,  fire  and  emergency 
medical  services  (EMS). 

Sophisticated  information  technology 
systems  serve  as  important  tools  for 
emergency  service  agencies  today, 
particularly  for  law  enforcement. 
Systems  such  as  the  National  Crime 
Information  Center  (NCIC),  the  Na¬ 
tional  Law  Enforcement  Telecom¬ 
munications  System  (NLETS), 
Automated  Fingerprint  Identification 
Systems  (AFIS)  and  individual  crimi¬ 
nal  information  data  systems  oper¬ 
ated  individually  by  all  50  states  en¬ 
able  officers  to  obtain  the  most  up- 
to-date  information  on  wanted  per¬ 
sons,  stolen  vehicles,  criminal  histo¬ 
ries,  and  department  of  motor  vehi¬ 
cle  records.  The  ability  to  access 
this  information  dependably  and 
quickly  is  essential  both  to  officer 
safety  and  to  the  speedy  and  effec¬ 
tive  administration  of  justice  at  all 
levels.  A  recent  survey  conducted 
on  the  effectiveness  of  NCIC  indi¬ 
cates  that  during  a  one  year  period, 
81,750  wanted  persons  were  found, 
113,293  individuals  were  arrested, 
39,268  missing  juveniles  and  8,549 
missing  adults  were  located  and 
110,681  stolen  cars  valued  at  over 
$570  million  were  recovered  as  a  re¬ 
sult  of  NCIC's  use. 


The  Federal  Bureau  of  Investigation 
(FBI)  is  responsible  for  the  admini¬ 
stration  of  NCIC  and  has  assured  the 
Committee  staff  that  this  system  will 
fully  meet  its  Year  2000  challenge, 
successfully  maintaining  its  links  to 
the  systems  of  all  50  states.  The 
challenge  for  local  law  enforcement 
agencies  is  to  be  sure  that  their  own 
links  to  NCIC  and  NLETS  via  state 
maintained  connections  and  any 
other  similar  systems  operated  on  a 
regional  or  agency-wide  level  are 
compliant  and  compatible  with  the 
larger  systems.  Also,  at  the  local 
agency  level,  there  often  is  a  great 
deal  of  "interconnectivity”  between 
the  emergency  service  department's 
systems  and  those  of  other  city 
agencies,  such  as  the  court  system, 
the  corrections  department,  and 
even  local  utility  companies,  thereby 
increasing  the  potential  for  Y2K-re- 
lated  problems  in  this  area. 

As  is  true  in  other  areas,  Y2K's  pres¬ 
ence  is  insidious  in  the  area  of 
emergency  services.  One  major 
police  department  related  to  the 
Committee  staff  that  its  city's  gov¬ 
ernment  was  required  to  remediate 
its  gasoline  pumps  in  order  to  ensure 
that  gasoline  would  continue  to  flow 
to  its  patrol  cars  on  January  1 ,  2000. 
This  problem  had  the  potential  to 
affect  the  entire  fleet  of  city  govern¬ 
ment-owned  vehicles.  In  this  par¬ 
ticular  case,  the  computerized  gaso¬ 
line  pumps  perform  a  time  and  date 
calculation  based  upon  the  last  time 
a  particular  gas  credit  card  was  used 
to  fuel  a  vehicle  and  therefore  the 
pumps  were  Y2K  vulnerable. 
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In  another  case,  the  sheriff  of  a  large 
western  county  related  that  his  de¬ 
partment  was  currently  examining  its 
computerized  detention  files  which 
track  in  and  out  time  of  inmates  at 
the  county  jail  facility  and  hearing 
date  information  for  inmates.  Addi¬ 
tionally,  a  consultant  specializing  in 
Y2K  public  safety  problems  provided 
the  Committee  staff  with  a  list  of  over 
35  items  of  technical  equipment 
commonly  used  in  law  enforcement 
that  could  potentially  be  vulnerable 
to  embedded  chip  problems.  These 
items  included  patrol  car  mounted 
video  equipment,  mobile  data  sys¬ 
tems  and  electronic  prisoner  moni¬ 
toring  devices  used  in  home  deten¬ 
tion  and  probation. 

In  addition  to  the  technical  aspect  of 
Y2K  vulnerabilities,  emergency 
service  departments  must  also  con¬ 
sider  the  possibility  that  January  1, 
2000,  may  bring  with  it  an  enormous 
increase  in  the  demand  for  their 
services,  depending  on  the  degree  of 
disruption  experienced.  This  must 
be  considered  as  part  of  Year  2000 
emergency  planning  at  the  state, 
county,  and  local  levels  of  govern¬ 
ment. 

U.S.  Emergency  Services  Struc¬ 
ture 

The  U.S.  emergency  service  and 
disaster  response  sector  is  a  multi¬ 
layered  safety  net  consisting  of  local, 
county,  and  state  police  depart¬ 
ments,  local  and  county  fire  depart¬ 
ments,  emergency  medical  service 
agencies,  local,  county,  and  state 


emergency  management  organiza¬ 
tions,  volunteer  organizations  and  a 
coordinated  network  of  federal  re¬ 
sources  available  when  state  and 
local  resources  are  exhausted  or 
overrun.  The  Y2K  problem  bears  the 
potential  to  affect  all  layers  and  sec¬ 
tions  of  this  safety  net.  In  the  event 
of  serious  Y2K-related  disruptions, 
many  of  the  organizations  that  com¬ 
prise  the  safety  net  will  be  called 
upon  to  respond. 

According  to  the  Bureau  of  Justice 
Statistics,  there  are  over  17,000  po¬ 
lice  and  sheriffs  departments  in  the 
U.S.  The  International  Association 
of  Fire  Chiefs  estimates  that  there 
are  32,000  fire  departments  in  this 
country.  Additionally,  approximately 
65  %  of  our  country's  EMS  agencies 
reside  within  the  organizational 
structure  of  our  nation's  fire  depart¬ 
ments. 

Statistics  provided  by  the  National 
Emergency  Number  Association  in¬ 
dicate  that  over  300,000  911  emer¬ 
gency  calls  are  placed  in  this  country 
daily.  (Approximately  110  million 
calls  for  emergency  assistance  per 
year).  An  additional  83,000  calls  for 
emergency  assistance  are  placed  via 
cellular  phones.  Ninety  percent  of 
the  U.S.  population  is  covered  by 
911  service. 

Each  of  the  50  states  and  U.S.  terri¬ 
tories  encompass  an  emergency 
management  department  headed  by 
a  state  emergency  manager.  The 
governors  in  each  respective  state 
appoint  many  of  these  managers. 
The  emergency  manager  serves  as 
the  chief  disaster  preparedness  and 
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response  coordinator  in  the  state. 
Twenty-four  states  and  one  U.S.  ter¬ 
ritory  are  currently  signatories  to  the 
Emergency  Management  Assistance 
Compact.  The  Compact  provides  for 
mutual  assistance  between  the 
states  in  managing  any  disaster  or 
emergency  that  is  duly  declared  by 
the  governor  of  the  affected  state, 
whether  arising  from  natural  disaster, 
technological  hazard,  man-made 
disaster,  resource  shortages,  com¬ 
munity  disorders,  insurgency  or  en¬ 
emy  attack.  This  compact  also  pro¬ 
vides  for  mutual  cooperation  in 
emergency-related  exercises,  test¬ 
ing,  or  other  training  activities.  While 
on  its  face  it  would  appear  that  this 
compact  would  hold  the  promise  of 
being  well-suited  to  address  the 
many  problems  that  may  arise  from 
the  Year  2000  problem,  discussions 
with  a  number  of  emergency  man¬ 
agers  reveals  otherwise.  During  her 
testimony  before  the  Committee  on 
October  2,  1998,  Ms.  Ellen  Gordon, 
President  of  the  National  Emergency 
Managers  Association  (NEMA),  ex¬ 
plained  that  mutual  aid  between  the 
states  might  not  be  possible  in  the 
event  that  all  states  are  affected  in  a 
significant  manner. 

Individual  states  might  not  be  able  to 
spare  limited  resources  or  be  in  a 
position  to  lend  other  mutual  aid. 
One  state  emergency  manager  told 
Committee  staff  that  he  would  be 
hesitant  to  release  any  of  his  own 
resources  to  another  state  because 
of  the  degree  of  uncertainty  about 
potential  Y2K  disruptions. 


The  Federal  Emergency  Manage¬ 
ment  Agency  (FEMA)  was  estab¬ 
lished  in  June  1979  by  President 
Carter  to  improve  the  responsive¬ 
ness  of  the  federal  government  to 
catastrophes  in  the  United  States. 
FEMA  provides  financial  and  techni¬ 
cal  assistance  to  states  and  localities 
overwhelmed  by  disasters.  FEMA 
administers  policies  related  to  emer¬ 
gency  management  and  planning, 
evacuation,  and  matters  associated 
with  civil  defense,  disaster  relief,  fire 
prevention,  earthquake  hazard  re¬ 
duction,  emergency  broadcasting 
services,  flood  insurance,  mitigation 
programs  and  dam  safety.  The  prin¬ 
cipal  federal  authority  for  the  provi¬ 
sion  of  disaster  relief  is  the  Robert  T. 
Stafford  Disaster  Relief  and  Emer¬ 
gency  Assistance  Act  (the  Stafford 
Act).  The  act  authorizes  the  Presi¬ 
dent  to  issue  major  disaster  or 
emergency  declarations,  sets  out 
eligibility  criteria  and  specifies  the 
types  of  assistance  the  President 
may  authorize.  Aid  is  provided  to 
meet  urgent  housing  needs,  pur¬ 
chase  necessary  personal  items  and 
obtain  legal  services  needed  as  a 
result  of  disasters.  Aid  is  provided  to 
state  and  local  governments  and 
non-profit  organizations  to  repair  or 
reconstruct  damaged  or  destroyed 
infrastructure,  remove  debris  and  to 
construct  protective  measures.  In 
addition  to  the  assistance  provided 
by  the  Stafford  Act,  federal  disaster 
assistance  is  also  provided  by  other 
federal  agencies  (see  description  of 
the  Federal  Plan). 
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The  Federal  Response  Plan1 

The  Federal  Response  Plan  (the 
Stafford  Act)  established  the  author¬ 
ity  for  the  federal  government  to  re¬ 
spond  to  disasters  and  emergencies 
in  order  to  provide  assistance  to 
save  lives  and  protect  public  health, 
safety,  and  property,  it  is  applicable 
to  natural  disasters  such  as  earth¬ 
quakes,  hurricanes,  typhoons,  torna¬ 
does  and  volcanic  eruptions;  tech¬ 
nological  emergencies  involving  ra¬ 
diological  or  hazardous  material  re¬ 
leases;  and  other  incidents  requiring 
federal  assistance. 

The  Plan  establishes  the  architecture 
for  a  systematic,  coordinated  and 
effective  federal  response  to  disas¬ 
ters  or  other  emergencies.  It  con¬ 
centrates  the  provision  of  federal  as¬ 
sistance  a  state  is  most  likely  to 
need  under  12  Emergency  Support 
Functions  (ESF).  Each  ESF  is 
headed  by  a  primary  agency,  which 
has  been  selected  based  on  its 
authorities,  resources,  and  capabili¬ 
ties.  The  12  ESFs  are  the  primary 
mechanism  through  which  federal 
response  assistance  is  provided  to 
the  affected  state. 

Emergency  Support  Functions 

ESF  #1  -  Transportation:  U.S. 
Department  of  Transportation 


ESF  #2  -  Communication:  U.S. 
National  Communications  System 

ESF  #3  -  Public  Works  and  Engi¬ 
neering:  U.S.  Department  of  De¬ 
fense 

ESF  #4  -  Firefighting:  U.S.  De¬ 
partment  of  Agriculture 

ESF  #5  -  Information  and  Plan¬ 
ning:  FEMA 

ESF  #6  -  Mass  Care:  American 
Red  Cross 

ESF  #7  -  Resource  Support: 

General  Services  Administration 

ESF  #8  -  Health  and  Medical 
Services:  U.S.  Department  of  Health 
Human  Services 

ESF  #9  -  Urban  Search  and  Res¬ 
cue  :  U.S.  Department  of  Defense 

ESF  #10  -  Hazardous  Materials: 

Environmental  Protection  Agency 

ESF  #11  -  Food:  U.S.  Department 
of  Agriculture 

ESF  #12  -  Energy:  U.S.  Depart¬ 
ment  of  Energy 

The  Plan  describes  federal  actions  to 
be  taken  in  providing  immediate  re¬ 
sponse  assistance  to  one  or  more 


’Public  Law  93-288  was  amended  by  Public 
Law  100-707  and  retitled  as  the  Robert  T. 
Stafford  Disaster  Relief  and  Emergency  As¬ 
sistance  Act  (Public  Law  93-288,  as 
amended). 
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affected  states.2  Response  assis¬ 
tance  includes  those  actions  and  ac¬ 
tivities  which  support  state  and  local 
government  efforts  to  save  lives, 
protect  public  health  and  safety,  and 
protect  property.  In  some  instances, 
a  disaster  or  emergency  may  result 
in  a  situation  that  affects  the  national 
security  of  the  United  States.  In 
those  instances,  other  national  secu¬ 
rity  authorities  and  procedures  could 
be  used. 

Each  state  has  general  responsibility 
for  law  enforcement,  using  local  and 
state  resources,  including  the  Na¬ 
tional  Guard.  In  some  cases,  a  state 
government  may  experience  a  law 
enforcement  emergency  (including 
one  in  connection  with  a  disaster  or 
emergency)  in  which  it  is  unable  to 
adequately  respond.  For  example,  it 
may  be  an  uncommon  situation  that 
requires  law  enforcement  assis¬ 
tance,  one  that  is  or  threatens  to  be¬ 
come  of  serious  or  epidemic 
(large-scale)  proportions,  and  one  in 
which  state  and  local  resources  are 
inadequate  to  protect  lives  and  prop¬ 
erty  of  citizens  or  to  enforce  the 
criminal  law.  In  the  event  such  a  law 
enforcement  emergency  exists 
throughout  a  state  or  part  of  a  state 
(on  behalf  of  itself  or  a  local  unit  of 
government),  the  governor  may,  in 
accordance  with  the  Federal  Re¬ 
sponse  Plan,  request  emergency 


2  Under  the  Plan,  a  State  means  any  State  of  the 
United  States,  the  District  of  Columbia,  Puerto 
Rico,  Virgin  Islands,  Guam,  American  Samoa, 
Trust  Territory  of  the  Pacific  Islands,  Common¬ 
wealth  of  the  Northern  Mariana  Islands,  Feder¬ 
ated  States  of  Micronesia,  or  Republic  of  the 
Marshall  Islands. 


federal  law  enforcement  assistance 
from  the  U.S.  Attorney  General.  If 
the  request  is  approved,  federal  law 
enforcement  assistance  may  be  pro¬ 
vided  to  include  equipment,  training, 
intelligence  or  personnel. 

Our  national  security  is  dependent 
upon  our  ability  to  assure  continuity 
of  government,  at  every  level,  in  any 
national  security  emergency  situation 
that  might  confront  the  nation.  Ex¬ 
ecutive  Order  12656,  the  Assign¬ 
ment  of  Emergency  Preparedness 
Responsibilities,  broadly  outlines  the 
role  of  FEMA’s  director  and  the  Na¬ 
tional  Security  Council  in  response  to 
national  security  emergencies.  Ex¬ 
ecutive  Order  12656  defines  a  na¬ 
tional  security  emergency  as  “any 
occurrence,  including  natural  disas¬ 
ter,  military  attack,  technological 
emergency  or  other  emergency,  that 
seriously  degrades  or  seriously 
threatens  the  national  security  of  the 
United  States.”  It  establishes  the 
role  of  the  President  in  national  se¬ 
curity  emergency  preparedness. 
Pursuant  to  the  President's  direction, 
the  National  Security  Gouncil  is  re¬ 
sponsible  for  developing  and  admin¬ 
istering  our  national  security  policy. 

Our  national  security  policy  dic¬ 
tates  that  all  national  security 
emergency  preparedness  activi¬ 
ties  shall  be  consistent  with  the 
Constitution  and  laws  of  the 
United  States  and  with  preserva¬ 
tion  of  the  constitutional  govern¬ 
ment  of  the  United  States. 

Effective  national  security  emer¬ 
gency  preparedness  planning  re- 
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quires  identification  of  the  functions 
that  would  have  to  be  performed 
during  such  an  emergency,  devel¬ 
opment  of  plans  for  performing  these 
functions  and  development  of  the 
capability  to  execute  those  plans. 

Executive  Order  12656  establishes 
that  the  director  of  FEMA  shall  serve 
as  an  adviser  to  the  National  Secu¬ 
rity  Council  on  issues  of  national  se¬ 
curity  emergency  preparedness,  in¬ 
cluding  mobilization  preparedness, 
civil  defense,  continuity  of  govern¬ 
ment,  technological  disasters,  and 
other  issues,  as  appropriate.  It  also 
states  that  the  director  of  FEMA  also 
shall  assist  in  the  implementation  of 
national  security  emergency  prepar¬ 
edness  policy  by  coordinating  with 
the  other  federal  departments  and 
agencies  and  with  state  and  local 
governments,  and  by  providing  peri¬ 
odic  reports  to  the  National  Security 
Council. 

The  public  has  voiced  its  concern  to 
the  Committee  regarding  the  role 
that  the  federal  government  will  play 
in  responding  to  Y2K-related  emer¬ 
gencies.  Numerous  misguided  ru¬ 
mors  and  outright  falsehoods  are 
being  circulated  in  some  quarters  on 
the  Internet  about  the  possibility  that 
“martial  law”  will  somehow  be  de¬ 
clared  by  the  federal  government  in 
response  to  Y2K  emergencies. 
These  rumors  and  falsehoods  will 
serve  only  to  incite  unwarranted 
public  panic  and  to  needlessly 
heighten  public  fear  and  misunder¬ 
standing  about  the  Y2K  problem. 
Such  irresponsible  and  reckless 
speculation  has  no  basis  in  fact,  and 
it  disregards  the  long  history  of  our 


nation’s  commitment  to  democracy 
and  our  own  constitutional  system  of 
government,  which  is  grounded  in 
the  rule  of  law. 

As  the  aforementioned  information 
illustrates,  a  well  coordinated,  pre¬ 
existing  network  exists  through 
which  appropriate  emergency  or  dis¬ 
aster  assistance  may  be  rendered 
from  the  federal  government  down 
through  the  states  and  local  govern¬ 
ments  when  the  states  request  such 
assistance.  Such  assistance  is  ren¬ 
dered  within  the  context  of  existing 
legal  authority,  and  in  accordance 
with  pre-existing  structures  as  previ¬ 
ously  described.  The  Committee 
strongly  believes  the  emergency  and 
disaster  response  structures  as  de¬ 
scribed  within  this  report  to  be  the 
appropriate  mechanism  through 
which  any  necessary  federal  re¬ 
sponse  to  Y2K-related  disruptions 
would  be  provided. 

Major  Initiatives 

On  October  2,  1998,  the  Committee 
held  a  hearing  to  assess  the  Year 
2000  readiness  of  government  at  the 
federal,  state,  and  local  level  to  con¬ 
tinue  to  provide  without  interruption 
vital  emergency  services,  such  as 
police,  fire  and  emergency  medical 
services.  The  Committee  also  in¬ 
quired  into  the  ability  of  emergency 
response  personnel  to  respond  to 
potential  Year  2000-related  disrup¬ 
tions,  such  as  interruptions  or 
anomalies  in  the  utility,  communica¬ 
tions  and  transportation  sectors. 

The  hearing  examined  the  role  of 
FEMA  in  coordinating  the  execu- 
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tion  of  the  Federal  Response  Plan, 
and  the  role  the  Plan  could  play  in 
mounting  a  federal  response  to  po¬ 
tential  Y2K-related  interruptions. 
Also,  it  explored  the  extent  to  which 
FEMA  has  considered  potential  Year 
2000  disruptions  as  events  that 
might  require  a  coordinated  federal 
response. 

The  hearing  examined  the  state  of 
FEMA's  readiness  to  carry  out  its 
mandate  under  the  Stafford  Act  in 
light  of  the  Year  2000  problem  and 
focused  on  FEMA's  outreach  to  the 
state  emergency  preparedness 
agencies  and  non-governmental  or¬ 
ganizations  that  help  respond  to  dis¬ 
asters. 

Lacy  Suiter,  Executive  Associate  Di¬ 
rector  of  FEMA’s  Response  and  Re¬ 
covery  Directorate,  provided  testi¬ 
mony  about  the  state  of  FEMA’s  in¬ 
ternal  Y2K  preparedness,  its  out¬ 
reach  to  state  and  local  emergency 
management  and  emergency  serv¬ 
ices  agencies,  and  FEMA’s  plans  to 
coordinate  the  federal  response  to 
Y2K-induced  emergencies. 

FEMA’s  other  Y2K  initiatives,  as  de¬ 
scribed  both  in  Mr.  Suiter’s  written 
statement  and  testimony  before  this 
Committee  are  summarized  as  fol¬ 
lows: 

•  FEMA  is  working  with  other 
agencies  in  the  emergency  serv¬ 
ices  sector  to  develop  an  out¬ 
reach  plan  that  will  include 
meetings  on  Y2K  convened  by 
federal  agencies,  outside  meet¬ 
ings  that  federal  officials  will  at¬ 


tend  to  increase  Y2K  awareness, 
and  other  communications  on 
Y2K  such  as  letters,  public  no¬ 
tices,  web  site  information,  and 
brochures.  FEMA  plans  to  post 
this  information  on  its  web  page. 

The  United  States  Fire  Admini¬ 
stration,  which  reports  to  FEMA, 
has  initiated  a  multi-phased  plan 
to  raise  awareness  and  assess 
readiness  on  the  Y2K  technology 
problem.  The  Fire  Administration 
staff  issued  a  suggested  article 
for  the  fire  and  emergency  serv¬ 
ices  publications  on  Y2K  prepar¬ 
edness,  and  FEMA  has  devel¬ 
oped  a  list  of  frequently  asked 
questions  about  Y2K  in  a  Y2K 
brochure.  FEMA  has  distributed 
the  brochure  to  participants  in  the 
National  Fire  Academy,  major  fire 
service  organizations,  and  state 
fire  marshals.  FEMA  is  in  the 
process  of  conducting  a  direct 
mailing  of  the  brochure  to  ap¬ 
proximately  32,000  individual  fire 
departments  nationwide.  FEMA 
has  also  distributed  materials  to 
associations  of  fire  and  emer¬ 
gency  service  equipment  manu¬ 
facturers  and  distributors  re¬ 
questing  information  on  actions 
their  members  are  taking  to  en¬ 
sure  that  their  products  are  Y2K 
compliant. 

FEMA  is  pursuing  outreach  ac¬ 
tivities  with  state  and  local  gov¬ 
ernments  through  the  National 
Emergency  Management  Asso¬ 
ciation  (NEMA)  and  the  Interna¬ 
tional  Association  of  Emergency 
Managers  (IAEM).  The  focus  has 
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been  to  heighten  awareness  of 
state  and  local  government  about 
the  seriousness  of  the  problem 
and  to  provide  Y2K  emergency 
preparedness  guidance  and  in¬ 
formation. 

NEMA  has  identified  Y2K  as  a 
priority  area  and  has  initiated  a 
Y2K  dialogue  with  its  members. 
NEMA  has  assigned  its  Prepar¬ 
edness,  Training,  and  Exercises 
Committee  to  review  and  coordi¬ 
nate  efforts  with  FEMA.  FEMA  is 
working  in  partnership  with 
NEMA,  IAEM  and  other  organi¬ 
zations  to  develop  preparedness 
guidance  for  the  entire  emer¬ 
gency  preparedness  community. 

FEMA’s  regional  directors  have 
been  asked  to  contact  the  state 
emergency  management  direc¬ 
tors  in  their  region  to  reinforce  the 
importance  of  preparedness  and 
compliance  at  the  state  level,  to 
emphasize  the  necessity  of  state 
outreach  to  local  governments, 
and  to  help  identify  areas  where 
additional  assistance  is  needed. 

FEMA’s  Emergency  Management 
Institute  has  incorporated  a  “Y2K 
Show-of-Hands  Survey”  to  gauge 
the  level  of  Y2K  awareness  of  its 
participants. 

In  November  1998,  FEMA’s  as¬ 
sociate  director  for  preparedness, 
training,  and  exercises  addressed 
the  IAEM  46th  Annual  Conference 
in  Norfolk,  Virginia,  to  urge  local 
emergency  managers  to  partici¬ 


pate  in  Y2K  preparedness  activi¬ 
ties. 

•  FEMA  is  in  the  process  of  plan¬ 
ning  a  series  of  regional  “table- 
top”  exercises  to  ascertain  the 
needs  of  the  states  resulting  from 
a  Y2K-related  emergency. 

•  FEMA  will  coordinate  a  nation¬ 
wide  “table  top”  exercise  some 
time  in  the  spring  of  1999  to  con¬ 
duct  an  operational  simulation  of 
its  response  to  a  Y2K  emer¬ 
gency. 

•  FEMA  is  hosting  monthly  meet¬ 
ings  with  primary  Federal  Re¬ 
sponse  Plan  agencies  to  monitor 
progress  on  the  Y2K  compliance 
status  of  the  12  emergency  sup¬ 
port  functions. 

•  FEMA  is  developing  a  “Y2K  Sup¬ 
plement”  to  the  Federal  Re¬ 
sponse  Plan  based  on  input  from 
the  Federal  Response  Plan 
agencies  and  their  regional 
counterparts.  Assessments  from 
the  emergency  services  sector 
and  the  President’s  Council  on 
Y2K  conversion  will  influence  the 
composition  of  the  supplement. 
FEMA  plans  to  publish  the  sup¬ 
plement  by  July  1,  1999.  The 
supplement  will  include  a  basic 
plan  and  annexes  for  each  of  the 
emergency  support  functions. 

Beginning  in  July  1998,  the  Com¬ 
mittee  staff  began  discussions  with 
FEMA  to  determine  what  authority 
the  federal  government  would  have 
to  act  in  case  of  serious  Y2K  disrup- 
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tions,  and  how  FEMA  specifically 
plans  to  respond  in  the  event  that 
such  disruptions  do  occur.  In  his 
testimony,  Mr.  Suiter  emphasized 
that  FEMA  programs  represent  a 
“bottoms  up”  approach  in  which  fed¬ 
eral  response  comes  “by  invitation 
only,”  upon  a  specific  request  from 
the  governor  of  an  individual  state,  in 
response  to  specific  and  identifiable 
emergencies  and  disasters.  This 
response  is  requested  by  and  coor¬ 
dinated  through  the  governor,  and 
never  independently  by  the  federal 
government.  This  fact  is  in  stark 
contrast  to  some  of  the  reckless  as¬ 
sertions  appearing  on  the  Internet, 
claiming  that  Y2K  events  would 
serve  as  an  “excuse”  for  a  massive 
marshaling  of  federal  forces  or  the 
suspension  of  civil  legal  authority  to 
deal  with  possible  disruptions. 

Sufficient  legal  authority  currently 
exists  under  the  Stafford  Act  to  allow 
federal  resources  to  be  utilized  in  re¬ 
sponse  to  a  Y2K-related  disruption  if, 
upon  application  from  a  state’s  gov¬ 
ernor,  an  “emergency  declaration”  is 
made  by  the  President  of  the  United 
States.  While  FEMA  has  no  author¬ 
ity  to  respond  to  the  causes  of  Y2K 
disruptions  or  to  provide  technical 
assistance  for  “Y2K  fixes,”  it  can  re¬ 
spond  to  the  physical  consequences 
of  Y2K  disruptions  if  they  constitute  a 
threat  to  lives,  property,  public  health 
and  safety  pursuant  to  the  Presi¬ 
dent’s  “emergency  declaration.” 

Although  FEMA  cannot  respond  to 
requests  for  technology  support,  it 
could  use  the  federal  response  sys¬ 
tem  to  provide  a  backup  network  to 


ensure  that  requests  for  such  aid 
from  state  and  local  governments 
are  channeled  to  the  appropriate 
public/private  coordination  entities 
established  by  the  President’s  Coun¬ 
cil  on  Y2K  Conversion.  FEMA  cur¬ 
rently  has  no  plans  to  pre-position 
resources  prior  to  January  1,  2000, 
but  will  activate  the  interagency 
Emergency  Support  Team  at  FEMA 
headquarters  and  its  10  interagency 
Regional  Operations  Centers,  begin¬ 
ning  on  December  29,  1999,  and 
continuing  through  January  4,  2000. 
FEMA  will  also  place  on  alert  its 
Emergency  Response  Support  De¬ 
tachments  during  that  time. 

Other  Y2k  Emergency  Services 
Initiatives 

During  the  summer  of  1998,  Federal 
Communications  Commission  Com¬ 
missioner  Michael  Powell  began 
playing  a  very  active  role  in  promot¬ 
ing  awareness  about  potential  Y2K- 
related  communications  problems  in 
the  public  safety  community.  Com¬ 
missioner  Powell  authored  an  article 
entitled  “Protecting  Public  Safety 
Communications  from  the  Year  2000 
Bug,”  which  was  published  in  the 
bulletin  of  the  Association  of  Public 
Safety  Communications  Officers  In¬ 
ternational.  In  June,  the  FCC  held  a 
public  safety  roundtable  which  at¬ 
tracted  many  experts  in  the  field  of 
public  safety  communications.  Dur¬ 
ing  the  International  Association  of 
Chiefs  of  Police  (IACP)  Conference 
held  in  Salt  Lake  City  October  17-22, 
1998,  John  Clark,  FCC  deputy  chief 
for  public  safety  in  the  Wireless 
Telecommunications  Bureau,  ad- 
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dressed  the  major  city  police  chiefs 
on  Y2K  issues.  On  November  16, 
1998,  the  FCC  sponsored  a  forum 
entitled  “Year  2000:  Maintaining 
Emergency  Response  Communica¬ 
tions.”  The  goal  of  the  forum  was  to 
examine  the  implications  of  the  Y2K 
problem  for  various  segments  of  the 
emergency  response  communica¬ 
tions  system. 

The  State  of  Texas  sponsored  a  2- 
day  national  conference  on  October 
15  and  16,  1998,  for  correctional  fa¬ 
cilities,  law  enforcement,  and  emer¬ 
gency  services  on  the  topic  of  the 
Year  2000  and  embedded  systems. 

In  his  written  statement  to  the  Com¬ 
mittee,  Sergeant  John  Powell,  Uni¬ 
versity  of  California  Police  Depart¬ 
ment,  Berkeley,  California,  detailed 
several  initiatives  that  the  Associa¬ 
tion  of  Public  Safety  Communica¬ 
tions  Officials  International  (APCO) 
and  the  IACP  are  conducting  on 
Y2K. 

Sergeant  Powell  reported  that  APCO 
and  the  National  Institute  of  Justice 
were  discussing  the  development  of 
a  series  of  short  Y2K  seminars  tar¬ 
geted  at  public  safety  chief  officers 
and  upper-level  management  to  ad¬ 
dress  four  key  Y2K  impact  areas. 
These  areas  are  internal  systems; 
potential  disruption  of  outside  serv¬ 
ices  such  as  power,  911  service,  and 
supply  chain  interruptions;  the  addi¬ 
tional  workload  that  could  confront 
agencies  due  to  heightened  fears 
about  the  problem  and  the  advent  of 
the  actual  problem  itself;  and  the 


special  needs  of  agency  employees 
during  the  time  of  impact. 

During  its  August  1998  conference  in 
Albuquerque,  New  Mexico,  APCO 
conducted  Y2K  seminars  to  address 
the  broad  array  of  issues  confronting 
public  safety  agencies.  The  IACP 
Communications  and  Technology 
Committee  included  Y2K  on  its 
agenda  at  the  IACP  conference  this 
year. 

First  Alert  System 

In  preparing  for  the  October  2,  1998 
Hearing  on  General  Govern¬ 
ment/Emergency  Services,  the 
Committee  staff  formulated  the  con¬ 
cept  of  a  Year  2000  problem  early- 
warning  system  dubbed  the  “Y2K 
First  Alert.”  Similar  to  the  National 
Weather  Service’s  storm  warning 
and  monitoring  system,  the  Y2K  First 
Alert  would  provide  American  citi¬ 
zens  with  the  earliest  possible 
warning  of  Y2K  events  that  may 
threaten  public  safety  or  national  in¬ 
frastructure.  Senators  Bennett, 
Dodd,  and  Collins  jointly  expressed 
their  support  for  the  development  of 
this  concept  during  the  opening  re¬ 
marks  of  the  October  2,  1 998  hear¬ 
ing. 

First  Alert  would  give  citizens  of  the 
eastern  United  States  up  to  1 7  hours 
advanced  warning  of  the  effects  of 
the  Year  2000.  Other  Americans  will 
have  proportionately  more  warning 
the  farther  west  they  live.  For  exam¬ 
ple,  citizens  in  Utah  will  have  up  to 
19  hours  of  advanced  notice  while 
citizens  of  Hawaii  and  some  citizens 
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of  Alaska  will  have  almost  a  full  day's 
notice.  This  system  would  be  most 
useful  for  problems  that  occur  at  or 
very  near  midnight,  December  31, 

1999,  which  could  be  referred  to  as 
Y2K  "prompt  effects."  These  effects 
could  occur  in  embedded  systems  in 
utilities,  transportation,  telecommuni¬ 
cations  and  other  applications  that 
had  not  been  repaired.  They  could 
also  occur  in  mainframe  or  informa¬ 
tion  technology  systems  that  serve  a 
control  or  supervisory  role  that  had 
not  been  fixed.  When  the  century 
change  occurs,  a  Y2K  prompt  effect 
may  very  quickly  cause  problems 
that  might  lead  to  some  disruption  of 
an  important  service. 

The  Y2K  First  Alert  concept  is  feasi¬ 
ble  because  of  the  arrangement  of 
international  time  zones.  A  new  day 
begins  in  the  middle  of  the  Pacific 
Ocean,  17  time  zones  earlier  than 
Eastern  Standard  Time  in  the  United 
States.  If  the  Y2K  bug  is  potent 
enough  to  cause  immediate  prob¬ 
lems  or  “prompt  effects”  in  informa¬ 
tion  systems  and  embedded  chips, 
the  effect  will  not  occur  worldwide  all 
at  once.  Rather,  the  problems  will 
happen  repeatedly  in  one  time  zone 
after  another  for  one  full  day.  For 
example,  Y2K  problems  that  occur  at 
precisely  12:00  a.m.  on  January  1, 

2000,  in  Wellington,  New  Zealand, 
are  occurring  while  it  is  still  only  7:00 
a.m.  on  December  31,  1999  in  the 
eastern  United  States.  Systems  and 
technology  vulnerable  to  Y2K  prompt 
effects  in  the  eastern  United  States 
will  not  be  affected  for  another  17 
hours  by  the  century  rollover. 


The  Committee  believes  it  is  impera¬ 
tive  to  use  this  advance  notice  that 
the  United  States  has  for  the  good  of 
the  nation.  For  instance,  it  would  be 
very  useful  to  know  that  utility  and 
transportation  problems  are  likely  to 
occur  based  on  our  Y2K  First  Alert 
system  before  large  segments  of  the 
population  are  away  from  their 
homes  celebrating  on  New  Year's 
Eve.  The  Committee  has  called  for 
the  government  to  implement  this 
concept  by  coordinating  the  re¬ 
sources  of  the  Departments  of  State 
and  Defense  as  well  as  other  de¬ 
partments  and  federal  agencies  that 
have  resources  and  expertise  to 
contribute  to  the  system. 

Since  the  Committee  issued  its  call 
on  October  2,  1998  several  parties 
have  acted.  FEMA  has  begun  ex¬ 
ploring  the  implementation  of  the 
concept.  The  telecommunications 
industry  has  begun  developing  a 
similar,  private-sector  concept 
named  "Follow  the  Sun,"  and  it  now 
appears  that  the  U.S.  Air  Force  is 
pursing  a  related  concept  to  meet  its 
mission  needs.  Finally,  the  Cana¬ 
dian  government  announced  in 
January  1999  that  it  plans  to  imple¬ 
ment  a  similar  concept. 

Assessments 

In  accordance  with  the  President’s 
Council  on  the  Year  2000  outreach 
program,  the  U.S.  Fire  Administra¬ 
tion  has  been  charged  with  monitor¬ 
ing  the  progress  of  the  fire  response 
agencies.  Outreach  to  the  law  en¬ 
forcement  sector  of  public  safety  has 
been  assigned  to  the  Department  of 
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Justice. 

While  there  was  a  high  level  of  Y2K 
awareness  among  the  limited  num¬ 
ber  of  representatives  of  individual 
emergency  service  agencies  con¬ 
tacted  by  the  Committee  staff  in 
preparation  for  the  October  2,  1998, 
hearing,  the  major  emergency  serv¬ 
ice  professional  associations  were 
just  beginning  to  coordinate  Y2K 
awareness  programs.  During  her 
opening  remarks  to  the  International 
Association  of  Chiefs  of  Police  Con¬ 
ference  in  Salt  Lake  City,  Utah,  in 
October  1998,  Attorney  General 
Janet  Reno  made  no  mention  of 
Y2K.  Some  federal  agencies  that 
have  regular  contact  with  state  and 
local  criminal  justice  agencies  were 
just  beginning  to  promote  awareness 
about  the  Y2K  problem  among  the 
state  and  local  agencies.  The  Na¬ 
tional  Institute  of  Justice  and  the  Bu¬ 
reau  of  Justice  Assistance  reported 
no  specific  or  focused  Y2K  initiatives 
in  progress  as  of  the  October  2, 
1998,  hearing.  The  National  Institute 
of  Justice  reported  that  it  was  in  the 
process  of  developing  a  Y2K  aware¬ 
ness  bulletin,  and  that  it  had  incorpo¬ 
rated  a  Y2K  compliance  stipulation 
into  its  grant  agreements  with  state 
and  local  agencies. 

As  part  of  the  Justice  Department 
charged  with  outreach  to  the  law 
enforcement  community  under  the 
President’s  Council,  both  the  Na¬ 
tional  Institute  of  Justice  and  the  Bu¬ 
reau  of  Justice  Assistance  could  be 
playing  a  more  active  role  in 
spreading  Y2K  awareness  among 
state  and  local  law  enforcement  and 


other  criminal  justice  agencies. 
These  agencies  have  a  broad  range 
of  contact  with  criminal  justice  and 
law  enforcement  organizations  at  the 
state  and  local  level  of  government 
and  bear  the  potential  to  make  a 
positive  impact  on  the  Y2K  problem 
in  the  emergency  service  sector.  As 
the  available  survey  data  indicates, 
there  is  a  startling  lack  of  prepared¬ 
ness  at  the  state  and  local  levels  of 
government.  All  efforts  to  alleviate 
this  problem  should  be  pursued. 

Almost  all  of  the  command-level 
emergency  service  personnel  con¬ 
tacted  by  the  Committee  staff  ex¬ 
pressed  serious  concerns  about  a 
perceived  lack  of  Y2k  awareness  on 
the  part  of  emergency  service  agen¬ 
cies  in  general.  To  date,  there  has 
been  no  known  large  scale  attempt 
to  gather  any  meaningful  survey  data 
to  measure  the  overall  level  of 
awareness  or  preparedness  of  this 
vital  sector. 

Concerns 

While  it  is  clear  that  an  effective 
mechanism  exists  at  the  federal  level 
to  coordinate  resources  in  the  event 
of  Y2K  related  emergencies  or  dis¬ 
ruptions,  there  is  still  concern  about 
the  Y2K  awareness  and  prepared¬ 
ness  levels  of  emergency  service 
providers  at  the  county  and  local 
levels.  The  strong  leadership  role 
that  FEMA  has  recently  assumed  in 
the  area  of  Y2K  emergency  prepar¬ 
edness  should  have  a  positive  im¬ 
pact  on  the  state  and  local  emer¬ 
gency  management  network  and 
hence  on  the  nation’s  overall  ability 
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to  respond  adequately  to  Y2K- 
related  emergencies.  The  overall 
Y2K  preparedness  status  of  state 
and  local  emergency  service  agen¬ 
cies  remains  unknown,  as  does  the 
extent  to  which  these  agencies  have 
considered  Y2K  as  an  event  for 
which  they  must  creatively  plan. 

In  his  testimony  before  the  Commit¬ 
tee,  Mr.  Bob  Cass,  city  manager  of 
Lubbock,  Texas,  described  the  Y2K 
emergency  simulation  exercise  that 
Lubbock  had  conducted  just  2  days 
prior  to  the  date  of  the  Senate  hear¬ 
ing.  This  exercise  gained  major  na-  _ 
tionwide  media  attention  and  served 
as  an  excellent  example  of  the  type 
of  emergency  planning  activity  that 
local,  county  and  state  governments 
should  replicate.  Bruce  Romer, 
Chief  Administrative  Officer  of  Mont¬ 
gomery  County,  Maryland,  also  testi¬ 
fied  about  Montgomery  County’s 
plans  to  conduct  a  similar  exercise  in 
December  1998.  Mr.  Romer  has 
stated  to  the  Committee  staff  that 
Montgomery  County  plans  to  acti¬ 
vate  its  Emergency  Operations 
Center  prior  to  December  31,  1999, 
and  said  that  in  the  event  of  a  Y2K 
emergency,  he  “doesn’t  want  to  be 
looking  around  for  people  they  will 
need.”  Both  Lubbock,  Texas  and 
Montgomery  County,  Maryland  rep¬ 
resent  model  cases  of  effective  Y2K 
emergency  preparation. 

In  his  written  statement  to  the  Com¬ 
mittee,  Sergeant  Powell  emphasized 
the  difficulty  of  accommodating  the 
additional  demand  for  emergency 
services  that  may  accompany  the 
century  date  change,  due  in  part  to 


the  possible  increase  in  public  fear 
toward  the  end  of  1999.  Of  great 
concern  to  the  Committee  is  the 
need  for  effective  dissemination  of 
credible  information  to  the  general 
public  about  the  expected  level  of 
severity  of  Y2K  disruptions.  Gov¬ 
ernments  at  all  levels  must  work 
constantly  over  the  next  year  to  ob¬ 
tain  accurate  information  in  order  to 
dispel  irrational  and  unwarranted 
fears  about  the  potential  impact  of 
Y2K  disruptions. 


FEDERAL  AGENCIES 


Overview 

On  the  whole,  federal  agencies  have 
been  slow  out  of  the  gate  in  the  race 
to  cross  the  finish  line  for  Y2K  ef¬ 
forts.  In  this  race,  even  though  one 
agency  or  another  may  at  times  lead 
the  pack,  all  agencies  must  cross  the 
finish  line  together  in  a  tie.  As  the 
race  enters  the  home  stretch,  agen¬ 
cies  must  pick  up  the  pace  and 
sense  of  urgency.  Although  much 
progress  has  been  made  this  year, 
the  home  stretch  of  this  course  is 
daunting. 

As  expected,  those  that  started  the 
earliest  generally  lead  the  pack.  The 
Social  Security  Administration  and 
Small  Business  Administration  are 
notable  agencies  in  front  that  started 
in  the  late  1980s.  Considering  the 
lead  these  agencies  have  over  those 
that  started  in  1996,  one  can  only 
conclude  that  late  starters  face  a 
formidable  task.  The  most  notable 
agencies  that  have  found  them¬ 
selves  in  that  unenviable  posi- 
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tion  include  the  Departments  of  En¬ 
ergy,  Defense,  and  Health  and  Hu¬ 
man  Services. 

All  federal  agencies  are  addressing 
the  problem  via  a  five-phased  proc¬ 
ess:  awareness,  assessment,  reno¬ 
vation,  validation,  and  implementa¬ 
tion.  The  next  milestone  occurs  in 
January  1999  when  agencies  should 
complete  the  validation  phase.  The 
last  milestone,  completion  of  imple¬ 
mentation,  occurs  in  March  1999. 
Due  the  tremendous  scope  and  per¬ 
vasiveness  of  potential  Y2K  prob¬ 
lems,  federal  agencies  have  man¬ 
aged  the  problem  through  a  triage 
process.  They  have  identified  those 
systems  that  are  ‘mission-critical’  to 
their  ability  to  perform  core  capabili¬ 
ties.  This  triage  process  is  decep¬ 
tively  complicated  due  to  the  inter¬ 
connectedness  of  today’s  systems. 
The  total  effort  comes  down  to  risk 
management,  mitigation,  and  avoid¬ 
ance. 

Although  agencies  are  focused  on 
mission-critical  systems,  many  other 
systems  are  too  important  to  be 
completely  ignored.  These  systems 
are  being  tracked  and  actively 
worked  on  at  a  lower  priority,  ac¬ 
cording  to  agencies’  reports. 

Initiatives 

General  Accounting  Office 

GAO  has  developed  and  published 
three  guides  that  address  the  Y2K 
problem.  These  guides  are  available 
at  www.gao.gov/y2kr.htm.  A  short 
description  of  each  follows: 


•  The  first  guide,  Year  2000  Com¬ 
puting  Crisis:  An  Assessment 
Guide,  was  published  in  Septem¬ 
ber  1997.  This  guide  walks  step- 
by-step  through  the  five-phase 
process  and  provides  a  program 
assessment  checklist. 

•  An  exposure  draft  of  the  Year 
2000  Computing  Crisis:  A  Testing 
Guide  was  released  in  June  1998 
and  was  published  in  November 
1998.  This  guide  provides  a  Y2K 
testing  step-by-step  framework. 
As  with  the  conversion  model  de¬ 
scribed  in  the  first  guide,  the  test 
model  consists  of  five  steps: 
testing  infrastructure,  software 
unit  testing,  software  integration 
testing,  system  acceptance  test¬ 
ing  and  end-to-end  testing. 

•  The  final  guide  in  the  series,  Year 
2000  Computing  Crisis:  Business 
Continuity  and  Contingency 
Planning,  was  published  in 
August  1998.  This  guide  recog¬ 
nizes  that  not  all  systems  will  be 
fully  remediated  through  the  five- 
phase  process  before  there  is  a 
Y2K  impact.  Additionally,  as  al¬ 
ways,  the  unexpected  and  unan¬ 
ticipated  must  be  planned  for 
even  when  systems  have  com¬ 
pleted  all  five  phases  of  remedia¬ 
tion.  An  excerpt  from  the  guide 
notes,  “Every  federal  agency 
must  ensure  the  continuity  of  its 
core  business  processes  by 
identifying,  assessing,  managing 
and  mitigating  its  Year  2000 
risks.  This  effort  should  not  be 
limited  to  the  risks  posed  by  Year 
2000-induced  failures  of  internal 
information  systems,  but 
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must  include  the  potential  Year 
2000  failures  of  others,  including 
business  partners  and  infra¬ 
structure  service  providers.”  The 
structure  described  in  this  guide 
covers  four  phases:  initiation, 
business  impact  analysis,  contin¬ 
gency  planning  and  testing. 

Emergency  Supplemental  Funding 

Included  in  the  Omnibus  Consoli¬ 
dated  and  Emergency  Supplemental 
Appropriations  Act,  1999,  Public  Law 
105-277,  were  provisions  for  $2.25 
billion  for  non-defense  agencies  and 
activities.  The  Department  of  De¬ 
fense  received  a  separate  allocation 
of  $1.1  billion.  These  monies  are  to 
remain  available  until  September  30, 
2001.  The  purpose  of  these  funds  is 
to  provide  for  expenses  necessary  to 
ensure  that  the  information  technol¬ 
ogy  that  is  used  or  acquired  by  the 
federal  government  meets  the  defini¬ 
tion  of  Year  2000  compliant  and  to 
meet  other  criteria  for  Year  2000 
compliance  as  the  head  of  each  de¬ 
partment  or  agency  considers  ap¬ 
propriate. 

At  the  time  this  report  was  written, 
two  submissions  for  release  of 
emergency  supplemental  funds  for 
non-defense  agencies  and  activities 
had  been  made:  November  6,  1998, 
and  December  8,  1998.  The  total 
amount  identified  in  these  submis¬ 
sions  is  $1.23  billion,  $891  million 
and  $338  million  respectively.  This 
accounts  for  almost  55%  of  the  total 
emergency  funds  available  for  non¬ 
defense  agencies  and  activities.  The 
Department  of  Defense  has  yet  to 
submit  any  documentation  for  re¬ 


lease  of  any  of  its  $1.1  billion  emer¬ 
gency  funds  for  Y2K. 

House  Committee  on  Government 
Reform's  Subcommittee  on  Govern¬ 
ment  Management.  Information,  and 
Technology  and  the  House  Com¬ 
mittee  on  Science’s  Subcommittee 
on  Technology 

During  the  104th  Congress,  the 
House  held  the  first  hearings  to  re¬ 
view  and  investigate  the  federal  gov¬ 
ernment’s  preparedness  for  Y2K.  Its 
efforts  have  provided  critical  over¬ 
sight  and  stimulation  of  agency  ef¬ 
forts.  To  have  the  broadest  impact 
possible,  both  Senators  Bennett  and 
Dodd  consciously  narrowed  our 
Committee’s  primary  focus  to  con¬ 
centrate  on  the  private  sector  and 
those  federal  agencies  that  provide  a 
service  to  crosscutting  segments  of 
the  private  sector.  Detailed  informa¬ 
tion  on  Representatives  Horn’s  and 
Morelia’s  activities  is  found  at 
www.house.gov/reform/gmit/  and 
www.  house.  gov/science/y2k.htm. 

Office  of  Management  and  Budget 

OMB  is  responsible  for  monitoring 
agency  progress  and  efforts  in  ad¬ 
dressing  Y2K.  Its  strategy  to  ensure 
agency  Y2K  compliance  is  based  on 
agency  accountability.  Progress  is 
monitored  through  agency  goals  for 
compliance  of  mission-critical  sys¬ 
tems,  progress  on  the  status  of  mis¬ 
sion-critical  systems,  status  of  mis¬ 
sion-critical  systems  being  repaired, 
and  agency  Y2K  cost  estimates. 
Progress  reporting  of  federal  agen¬ 
cies  is  on  a  quarterly  and/or  monthly 
basis  depending  on  the  tier  that 
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the  agency  is  assigned  to  by  OMB. 
The  three-tier  system  that  OMB  is 
using  consists  of 

Tier  1  agencies:  NOT  making 
adequate  progress, 

Tier  2  agencies:  making  prog¬ 
ress,  but  with  concerns,  and 

Tier  3  agencies:  making  sat¬ 
isfactory  progress. 

Subsequent  to  agency  submission  of 
quarterly  status  reports  to  OMB, 
OMB  generates  a  consolidated  re¬ 
port  based  on  agency  self-reported 
information.  OMB’s  7th  Quarterly  Re¬ 
port  was  issued  on  December  8, 
1998.  It  is  based  on  data  as  of  No¬ 
vember  15,  1998. 

Efforts  by  OMB  to  provide  oversight 
are  often  augmented  by  internal 
audit  organizations  within  agencies 
and  by  GAO. 

CIO  Council  Subcommittee  on  Year 
2000 

Among  the  Federal  Government’s 
Y2K  initiatives,  formation  of  the  Chief 
Information  Officers  (CIO)  Council 
Subcommittee  on  Year  2000,  for¬ 
merly  the  Year  2000  Interagency 
Committee,  is  the  oldest.  The  com¬ 
mittee  was  born  in  November  1995 
when  it  held  its  first  meeting.  The 
Year  2000  Interagency  Committee 
was  an  informal  committee  headed 
by  Kathy  Adams  from  the  Social  Se¬ 
curity  Administration.  The  Commit¬ 
tee’s  purpose  was  to  raise  Y2K 
awareness,  address  crosscutting  is¬ 
sues  affecting  many  or  all  federal 


departments  or  agencies,  seek  mu¬ 
tual  solutions  where  possible  and 
share  best  practices. 

The  Information  Technology  Man¬ 
agement  Reform  Act  established  a 
CIO  Council  to  review  and  provide 
guidance  on  crosscutting  information 
technology  (IT)  issues.  During  No¬ 
vember  1996,  the  CIO  Council  des¬ 
ignated  the  Year  2000  Interagency 
Committee  as  an  official  subcom¬ 
mittee  and  renamed  it  the  CIO 
Council  Subcommittee  on  Year 
2000.  The  Subcommittee  was  in¬ 
strumental  in  assisting  OMB’s  devel¬ 
opment  of  the  Y2K  quarterly  status 
report. 

President’s  Y2K  Conversion  Council 

Executive  Order  13073  established 
the  President’s  Council  on  Year 
2000  Conversion  in  February  1998. 
The  Council  has  the  mandate  to 
oversee  agencies’  activities  to  as¬ 
sure  that  their  systems  operate 
smoothly  through  Y2K.  It  is  respon¬ 
sible  for  coordinating  the  federal 
government’s  Y2K  efforts.  Repre¬ 
sentatives  from  more  than  30  major 
federal  executive  and  regulatory 
agencies  comprise  the  Council. 
These  executive  representatives  are 
sufficiently  senior  so  as  to  have  1) 
extensive  knowledge  of  their  agen¬ 
cies’  Y2K  efforts  and  external  or¬ 
ganizational  relationships  and  2) 
authority  to  commit  their  agencies. 

The  Council  has  established  over  30 
sector  groups  with  coordinators  from 
the  appropriate  federal  agencies 
charged  with  outreach  into  the  public 
and  private  sectors,  both  do- 
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mestically  and  internationally.  Look¬ 
ing  internally  at  federal  systems,  the 
Council’s  oversight  includes  ensuring 
that  adequate  financial  and  person¬ 
nel  resources  are  committed  to  fed¬ 
eral  Y2K  efforts  and  that  they  are 
used  effectively. 

Assessments 


Currently,  of  24  major  agencies  that 
comprise  the  federal  CIO  Council, 
six  are  in  Tier  1 ,  seven  in  Tier  2  and 
11  in  Tier  3.  Table  1  identifies  these 
agencies  by  tier.  This  is  based  on 
self-reported  progress  on  mission- 
critical  systems. 


Tier 

Agencies 

One 

DOD,  DOE,  HHS,  DOS,  DOT  and  AID 

Two 

USDA,  DOC,  Education,  DOL,  DOJ, 

Treasury  and  OPM 

Three 

DOL,  VA,  EPA,  FEMA,  GSA,  HUD,  NASA, 

NRC,  NSF,  SBA  and  SSA 

Table  1:  Current  Status  of  Federal  Agencies 


Cost  estimates  continue 
to  be  on  the  rise  for  fed¬ 
eral  agencies.  Since 
August,  estimates  have 
risen  $1  billion  to  $6.4  bil¬ 
lion.  Over  80%  of  the  in¬ 
crease  is  attributable  to 
three  departments:  Health 
and  Human  Services 
(HHS),  Treasury,  and 
Defense.  HHS  hiked  its 
estimate  $165  million  for 
potential  contingencies  in  fiscal  year 
2000,  Treasury  increased  its  esti¬ 
mate  by  $53  million  for  increased 
testing  and  validation  and  Defense 
jumped  $591  million  for  increased 
independent  verification  and  end-to- 
end  testing.  With  much  testing  to  go 
and  schedules  closer  to  possible 
slippage,  it  is  likely  that  these  cost 
estimates  will  continue  to  rise. 

Sixty-one  percent  of  federal  mission- 
critical  systems  are  now  reported  as 
compliant.  This  is  a  10%  increase 
since  August.  The  remaining  39%  is 
scheduled  for  completion  by  March 
1999.  Unfortunately,  slippage  is  al¬ 
ready  apparent.  Ten  percent  of  mis¬ 
sion-critical  systems  did  not  reach 
the  renovation  milestone  of  Septem¬ 
ber  1998.  As  we  move  further  into 
1999,  the  risk  of  schedule  slippage 
will  increase. 


Concerns 

The  Committee  is  very  concerned 
about  current  agency  progress.  De¬ 
spite  an  apparent  increase  in  activity, 
it  is  still  not  enough.  Many  schedules 
show  a  steep  improvement  curve 
just  before  key  OMB  milestones. 
Both  internal  audit  reporting  and 
GAO  reporting  support  the  concern 
over  schedule.  Furthermore,  hear¬ 
ings  by  the  House  specifically  fo¬ 
cused  on  the  federal  government’s 
preparedness  continue  to  raise 
warning  flags.  The  federal  govern¬ 
ment  has  never  received  a  passing 
grade  on  any  of  the  six  report  cards 
issued  by  Congressman  Stephen 
Horn.  Additionally,  a  large  portion  of 
testing,  known  to  be  one  of  the  larg¬ 
est  portions  of  the  overall  Y2K  effort, 
is  yet  to  come.  Several  agencies 
stand  out  as  ones  that  require  fo- 
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cused  oversight  and  stepped  up  ef¬ 
forts  due  to  the  risks  associated  with 
their  current  pace  of  progress: 
Healthcare  Finance  Agency  (HCFA), 
Federal  Aviation  Administration 
(FAA),  Department  of  Energy  (DOE) 
and  Department  of  Defense  (DOD). 
In  light  of  these  risks,  these  agen¬ 
cies’  business  continuity  and  contin¬ 
gency  plans  become  even  more  im¬ 
portant. 

The  area  of  system  interfaces  is  an¬ 
other  concern  that  requires  addi¬ 
tional  attention.  These  interfaces 
exist  internally  within  each  federal 
agency;  they  exist  between  different 
agencies,  between  agencies  and 
state  governments,  and  between 
agencies  and  local  governments. 
Generally,  these  interfaces  support 
government  revenue  collection  sys¬ 
tems  and  benefits  payment  systems. 
Often,  it  is  not  clear  who  is  responsi¬ 
ble  for  interfaces  among  federal, 
state  and  local  governments.  Fur¬ 
thermore,  the  testing  is  complicated 
by  the  need  to  test  these  interfaces 
as  a  portion  of  the  overall  testing 
strategy. 

One  prime  example  is  HCFA,  which 
is  one  the  farthest  behind  in  its  criti¬ 
cal  systems  remediation  efforts. 
HCFA  manages  Medicare,  Medicaid 
and  Child  Health  programs  serving 
over  74  million  Americans.  Prob¬ 
lems  with  federal  systems  combined 
with  Y2K  failures  state  and  local 
government  systems,  or  the  inter¬ 
faces  between  them,  could  result  in 
delayed  benefit  payments,  payments 
not  being  received  at  all  or  delivered 
to  the  wrong  party,  eligible  recipients 
not  receiving  payments  or  incorrect 


amounts  disbursed.  Given  the  ex¬ 
treme  volume  of  transactions  that 
occur  daily  to  support  these  pro¬ 
grams,  a  contingency  plan  consisting 
of  manual  processes  would  not  suf¬ 
fice. 

Finally,  half  of  the  emergency  sup¬ 
plemental  funds  for  non-defense 
agencies  have  already  been  re¬ 
leased  within  the  past  2  months. 
These  funds  were  intended  to  stretch 
over  a  3-year  period,  which  suggests 
that  little  will  remain  for  true  emer¬ 
gency  requirements.  It  is  not  clear 
that  OMB  scrutinized  funding  re¬ 
quests  as  closely  as  the  Committee 
would  have  hoped.  While  OMB  is 
experienced  in  overseeing  budgetary 
requests,  another  entity  more  in¬ 
volved  with  the  Y2K  issue,  such  as 
the  President’s  Council,  might  have 
been  better  fit  to  evaluate  the  Y2K 
funding  requests.  Unfortunately, 
suggestions  from  the  House  to  give 
more  authority  and  responsibility  to 
the  President’s  Council  have  yet  to 
take  root. 


DEPARTMENT  OF  DEFENSE 


In  addition  to  the  concerns  ex¬ 
pressed  above,  the  Department  of 
Defense  (DOD),  as  the  largest  fed¬ 
eral  agency  with  nearly  half  of  the 
federal  government’s  computer  as¬ 
sets,  faces  a  monumental  manage¬ 
ment  challenge  in  addressing  Y2K. 
The  department  relies  on  computer 
systems  to  conduct  nearly  all  of  its 
functions,  including  strategic  and 
tactical  military  operations;  sophisti¬ 
cated  weaponry;  intelligence  collec¬ 
tion,  analysis,  and  dissemina- 
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tion;  security  efforts;  and  more  rou¬ 
tine  business  operations  such  as 
payroll  and  logistics. 

The  breadth  of  the  problem  con¬ 
fronting  DOD  is  enormous;  it  has 
more  than  1.5  million  computers, 
28,000  automated  information  sys¬ 
tems  and  10,000  networks.  Its  in¬ 
formation  systems  are  linked  by 
thousands  of  interfaces  that  ex¬ 
change  data  within  DOD  and  across 
organizational  and  international 
lines.  Furthermore,  DOD’s  reliance 
on  computer  systems  is  increasing 
as  technology  changes  the  tradi¬ 
tional  concepts  of  warfighting 
through  improved  intelligence  and 
rapidly  modernized  command  and 
control.  Successful  defense  opera¬ 
tions  will  depend  greatly  on  the  de¬ 
partment’s  ability  to  ensure  that  its 
systems  and  the  systems  with  which 
they  interface  are  Year  2000  compli¬ 
ant. 

According  to  the  U.S.  General  Ac¬ 
counting  Office  (GAO),  which  pub¬ 
lished  a  series  of  reports  last  year  on 
DOD’s  overall  efforts  to  address  the 
Year  2000  problem,  the  depart¬ 
ment’s  efforts  pose  considerable 
risks.  DOD  still  does  not  have  reli¬ 
able,  timely  information  on  program 
status,  because  information  being 
reported  up-the-chain  is  not  vali¬ 
dated  for  accuracy  or  completeness. 
GAO  found  instances  in  which  de¬ 
fense  components’  reports  on  sys¬ 
tems  compliance  were  often  inaccu¬ 
rate.  In  addition,  GAO  found  that 
guidance  issued  by  the  department 
to  its  components  on  issues  such  as 
interfaces,  testing,  and  reporting  has 


been  inconsistent,  leading  to  false 
starts  and  uncoordinated  efforts. 
GAO  also  found  that  DOD’s  contin¬ 
gency  plans,  developed  in  the  event 
of  systems  failures,  are  frequently 
not  executable. 

DOD’s  Inspector  General  and  other 
internal  audit  offices  have  issued 
over  130  reports  that  similarly  ques¬ 
tion  the  department’s  management 
of  its  Year  2000  program.  These 
audit  reports  repeatedly  revealed 
many  of  the  same  findings  as  those 
reported  by  the  GAO,  as  well  as 
problems  experienced  in  assessing 
and  inventorying  systems,  effectively 
determining  and  allocating  re¬ 
sources,  and  accurately  testing  and 
certifying  systems’  Year  2000  com¬ 
pliance.  The  department’s  audit  re¬ 
ports  also  revealed  that  much  of 
DOD’s  base  level  infrastructure, 
such  as  security  systems,  telephone 
switches,  traffic  control  systems,  and 
water  and  sewage  treatment  sys¬ 
tems  are  vulnerable  to  Year  2000 
problems. 

These  findings  and  risks  are  re¬ 
flected  in  the  Office  of  Management 
and  Budget’s  assessment  of  DOD  as 
a  “Tier  1”  agency,  i.e.,  an  agency 
showing  “insufficient  evidence  of 
adequate  progress.”  DOD  senior 
management  has  been  responsive  to 
the  GAO  and  internal  audit  findings 
and  has  taken  an  active,  highly  visi¬ 
ble  interest  in  implementing  correc¬ 
tive  actions.  The  senior  manage¬ 
ment  team  has  improved  its  over¬ 
sight  of  the  Year  2000  program  so 
that  it  can  more  effectively  assess 
program  direction  and  take  actions 
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based  on  this  assessment  and 
known  problems.  However,  DOD 
remains  behind  schedule  in  com¬ 
pleting  its  systems  remediation  and 
is  at  considerable  risk  of  being  un¬ 
able  to  successfully  meet  the  Year 
2000  deadline. 


STATE  AND  LOCAL 
GOVERNMENT 


Overview 

In  addition  to  the  50  state  govern¬ 
ments,  there  are  3,068  county  gov¬ 
ernment  jurisdictions  and  approxi¬ 
mately  87,000  other  local  govern¬ 
ment  jurisdictions  within  the  United 
States. 

These  state,  county,  and  local  gov¬ 
ernments  deliver  the  majority  of  the 
essential  services  upon  which  citi¬ 
zens  rely  each  day.  These  include 
police,  fire,  and  emergency  medical 
services  response;  financial  support 
networks,  including  welfare  and 
Medicaid  payments;  unemployment 
insurance  payment  systems;  disabil¬ 
ity  claims;  and  basic  utilities,  such  as 
water  and  wastewater,  sanitation, 
and  local  transportation  systems. 
While  the  prospect  of  preparing  fed¬ 
eral  government  systems  is  daunt¬ 
ing,  the  challenge  of  assuring  the 
Y2K  preparedness  of  these  other 
sectors  of  government  is  even  more 
mammoth.  The  consequences  of 
failures  in  this  sector  are  as  poten¬ 
tially  grave  to  the  public  as  failures  in 
the  vital  sectors  of  power  and  tele¬ 
communications. 

Initiatives 


Several  of  the  largest  intergovern¬ 
mental  councils  and  professional  or¬ 
ganizations  are  actively  engaged  in 
Y2K  awareness  programs.  The  Na¬ 
tional  League  of  Cities,  the  National 
Association  of  Counties,  and  the  In¬ 
ternational  City/County  Management 
Association,  in  conjunction  with  Pub¬ 
lic  Technology,  Inc.,  are  sponsoring 
a  Y2K  awareness  program  entitled 
“Y2K  and  You.”  The  Metropolitan 
Washington  Council  of  Governments 
has  published  a  Year  2000  Best 
Practice  Manual.  These  programs 
are  good  examples  of  what  an  effec¬ 
tive  dialogue  between  state,  county, 
and  local  governments  can  achieve. 

In  his  testimony  before  the  Commit¬ 
tee  on  October  2,  1998,  the  Honor¬ 
able  Michael  O.  Leavitt,  governor  of 
Utah  and  vice  chairman  of  the  Na¬ 
tional  Governor’s  Association  (NGA), 
described  several  NGA  initiatives 
aimed  at  assisting  the  states  with 
Y2K  preparation.  In  July  1998,  the 
NGA  held  a  “Year  2000  State  Sum¬ 
mit”  which  focused  on  state,  local, 
and  private-sector  coordination  and 
on  establishing  a  common  agenda  to 
increase  public  confidence  in  state 
services.  The  NGA  has  also  pub¬ 
lished  an  issue  brief  entitled  “What 
Governors  Need  to  Know  About 
Y2K,”  which  Governor  Leavitt  stated 
“outlines  the  steps  governors  should 
take  as  chief  executive  officers, 
guarantors  of  public  safety,  and  pub¬ 
lic  leaders.”  Both  the  State  of  Texas 
and  the  State  of  Pennsylvania  have 
been  recognized  as  having  two  of 
the  most  extensive  and  well- 
developed  state  Y2K  programs. 
New  York  State  Governor  George 
Pataki  has  also  been  leading  the 
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call  for  Y2K  preparedness  in  his 
state. 

Assessments 

The  assessments  of  Y2K  progress  in 
the  sector  of  state  and  local  govern¬ 
ment  are  not  optimistic. 

The  National  Association  of  State 
Information  Resource  Executives 
(NASIRE)  is  conducting  a  continuing 
survey  of  individual  state  Y2K  pre¬ 
paredness.  The  Gartner  Group  has 
also  conducted  a  state  government 
Y2K  survey.  The  National  Associa¬ 
tion  of  Counties  (NACO)  recently 
commissioned  National  Research, 
Inc.  to  conduct  a  random  survey  of 
the  Y2K  status  of  county  govern¬ 
ments.  The  General  Accounting  Of¬ 
fice  (GAO)  is  examining  the  status  of 
federal  to  state  data  exchanges. 
These  include  the  vital  connections 
through  which  funding  from  the  fed¬ 
eral  government  is  provided  to  the 
states  for  various  aid  programs. 

Unemployment,  for  example,  is  fed¬ 
erally  funded,  but  state  administered. 
The  Department  of  Labor  reported  in 
December  that  the  following  states 
were  behind  in  remediating  their  un¬ 
employment  systems:  Connecticut, 
Delaware,  the  District  of  Columbia, 
Hawaii,  Illinois,  Kansas,  Louisiana, 
Massachusetts,  Missouri,  Montana, 
New  Hampshire,  New  Mexico  and 
Vermont. 

In  his  testimony  before  the  Commit¬ 
tee  on  October  2,  1998,  John  Tho¬ 
mas  Flynn,  CIO  of  the  State  of  Cali¬ 
fornia,  and  president  of  NASIRE 
stated  that  compliance  among  the  50 


states  with  all  aspects  of  mission- 
critical  legacy  systems  ranged  indi¬ 
vidually  from  under  10%  complete,  to 
more  than  90%  complete.  According 
to  the  NASIRE  survey  results,  just 
under  half  (24)  of  those  responding 
had  completed  remediation  of  at 
least  50%  of  their  mission-critical 
systems.  Mr.  Flynn  noted  that  no 
state  had  declared  itself  100%  com¬ 
plete  as  yet. 

Data  provided  by  the  Gartner  Group 
indicate  that  only  50%  of  the  states 
are  evaluated  as  at  Level  III  Status 
under  the  Gartner  Group’s  scale.  A 
Level  III  rating  indicates  that  the 
state  has  completed  its  project  plan; 
has  assigned  resources;  has  com¬ 
pleted  a  detailed  risk  assessment, 
remediated;  and  has  tested  20%  of 
mission-critical  systems,  conducted 
vendor  reviews  and  has  completed 
contingency  plans.  Thirty  percent  of 
the  states  are  listed  at  Level  II,  indi¬ 
cating  that  they  at  least  have  devel¬ 
oped  an  inventory  of  operational  de¬ 
pendencies.  Ten  percent  of  the 
states  are  evaluated  as  Level  I,  indi¬ 
cating  that  they  have  begun  their 
projects,  are  aware  of  the  problem, 
and  have  begun  conducting  their  in¬ 
ventories.  The  remaining  10%  are 
evaluated  as  “uncertain,”  indicating 
they  were  unaware  of  their  Y2K  pre¬ 
paredness  status. 

The  GAO  has  advised  that  as  of  No¬ 
vember  1998,  33  states  had  com¬ 
pleted  75%  of  their  verification  of 
federal  data  exchanges.  GAO  found 
that  as  of  June  30,  1998,  approxi¬ 
mately  one  half  of  the  state  disability 
determination  systems  had  not  been 
renovated,  tested,  and  certified 
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Y2K  compliant.  Additionally,  over 
90%  of  state  Medicaid,  70%  of  state 
Temporary  Assistance  for  Needy 
Families  and  75%  of  the  state  Food 
Stamp  Program  systems  were  not 
Y2K  compliant  as  of  August  1998 
according  to  GAO  statistics. 

Survey  data  recently  released  by 
NACO,  collected  from  500  counties, 
indicate  that  only  50%  of  the  respon¬ 
dents  have  countywide  plans  to  ad¬ 
dress  Y2K  issues.  Of  the  16  coun¬ 
ties  with  populations  over  500,000, 
all  but  one  have  a  countywide  plan. 
Seventy-four  of  the  119  counties 
having  populations  below  10,000  re¬ 
ported  that  they  have  not  prepared  a 
Y2K  plan. 

Fifty-four  percent  of  the  counties 
surveyed  reported  that  they  have  no 
contingency  plans  for  Y2K  disrup¬ 
tions.  Twenty-two  percent  reported 
that  they  had  prepared  Y2K  contin¬ 
gency  plans.  Fifty  percent  of  the 
largest  counties  in  the  survey  stated 
that  they  have  contingency  plans, 
while  only  19  of  119  counties  in  the 


smallest  population  group  (popula¬ 
tion  below  10,000)  had  one.  The  500 
survey  respondents  reported  a  total 
cost  estimate  of  over  $283  million  for 
Y2K  compliance. 

A  survey  published  by  the  Office  of 
the  New  York  State  Comptroller  in 
September  1998  indicates  that  100% 
of  New  York’s  counties  have  made 
preparations  for  Y2K.  Twenty-six 
percent  of  the  cities,  54%  of  the 
towns,  48%  of  the  villages  and  61% 
of  the  fire  districts  reported  that  they 
had  not  made  Y2K  preparations. 

Concerns 

The  Committee  has  serious  concern 
about  the  Y2K  readiness  of  state  and 
local  governments. 

This  concern  is  supported  by  all  of 
the  previpusly  cited  surveys,  which, 
when  taken,  together  indicate  a  vast 
disparity  in  the  readiness  level  of  the 
individual  states,  and  a  disturbingly 
low  overall  level  of  preparedness  on 
the  part  of  county  and  local  govern¬ 
ment  jurisdictions. 


Senate  Special  Committee  on  the  Year  2000  Technology  Problem 


Investigating  the  Impact  of  the  Year  2000  Problem 


oo 

Ov 

®  CD 


* 

Xfl 

QJ 

ts 

55 

O 

l/) 

o> 

£ 

o 

{/5 

s 

55 


fS 

5- 

& 
0 > 

* 


ti 

“S' 

ST 

3 


§< 

I 

& 

J 


I 

o 

o 

I 

I 

<3 


*8 

I 

S 

si 

I 


Senate  Special  Committee  on  the  Year  2000  Technology  Problem 


Investigating  the  Impact  of  the  Year  2000  Problem 


GENERAL  BUSINESS 


The  general  business  sector  portion 
of  this  report  is  organized  into  sev¬ 
eral  sections.  First,  the  small  busi¬ 
ness  to  global  corporations  section 
serves  to  set  the  stage  for  business 
and  Y2K  in  generic  terms.  The  over¬ 
view  provides  a  look  at  the  supply 
chain  in  general  and  highlights  the 
interdependencies  among  links  of 
the  chain.  Major  initiatives  within  this 
section  address  activities  of  this 
Committee,  an  October  committee 
hearing  and  a  field  hearing  in  Ore¬ 
gon;  activities  of  the  Manufacturing 
Extension  Program; 
and  United  States  De¬ 
partment  of  Agriculture 
(USDA)  activities.  In 
addition  to  the  status 
information  provided  in 
discussion  of  the  two 
Committee  hearings,  a 
separate  section  looks 
at  two  assessments  of 
business.  Finally,  this 
section  of  the  report  focuses  on  sev¬ 
eral  important  industries  not  already 
addressed  in  the  Committee’s  other 
seven  sectors:  pharmaceuticals, 
food  and  chemical  manufacturing. 
Each  of  these  industries  has  its  ob¬ 
vious  importance  to  the  public’s 
health,  welfare,  and  well-being.  The 
consequences  to  the  public  of  any 
one  of  these  industries  having  sig¬ 
nificant  disruptions  due  to  Y2K  is  un¬ 
acceptable.  Therefore,  “urgent”  ef¬ 
forts  for  preparedness  must  in¬ 
crease. 


SMALL  BUSINESS  TO 
GLOBAL  CORPORATIONS 


Overview 

As  is  the  case  with  ever-increasing 
aspects  of  daily  life,  business  has 
grown  more  dependent  on  technol¬ 
ogy  -  especially  information  technol¬ 
ogy.  Not  only  has  it  changed  our 
daily  lives,  it  has  changed  our  daily 
Competition  in  local, 
state,  regional  and  in¬ 
ternational  business 
markets  has  shrunk 
profit  margins  for  all 
businesses  -  from 
small  independent 
businesses  to  global 
conglomerates. 
Shrinking  profit  mar¬ 
gins  have  motivated 
companies  to  reduce  expense  and 
increase  efficiency.  Information 
technology  enables  companies  to 
regain  a  solid  hold  on  profitability 
and  stimulate  growth. 

American  business  has  developed 
and  adopted  just-in-time  inventory  as 
the  standard.  Lean  manufacturing  is 
central  to  the  success  of  most  large, 
complex  factory  operations.  Preci¬ 
sion  farming  has  led  to  increased 
production  with  fewer  resources.  The 
supply  chain  from  raw  material/basic 
ingredient  production/provider,  to 


business. 


"I  BELIEVE  THAT  AS 
BUSINESSES  REVIEW 
THEIR  SUPPLY  CHAINS 
FOR  Y2K  PREPAR¬ 
EDNESS  WE  WILL  SEE  A 
‘FLIGHT  TO  QUALITY’.  ” 

Senator  Bob  Bennett 
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preliminary  processing,  to  manufac¬ 
turer,  to  distributor,  to  wholesaler  or 
retailer,  and  ultimately  to  final  cus¬ 
tomer,  has  become  ever  tighter  and 
shorter.  The  ripple  effect  from  a 
problem  at  any  point  in  this  chain 
can  be  felt  throughout  the  length  of 
the  chain.  Information  technology 
provides  the  backbone  that  fuses  the 
chain  at  each  link  often  via  electronic 
commerce/electronic  data  inter¬ 
change  (EC/EDI). 


Although  it  may  seem  contrary  to 
what  one  would  normally  think,  a 
system  that  actually  crashes  due  to  a 
Y2K  problem  causes  a  better  situa¬ 
tion  than  one  that  does  not.  In  the 
case  of  a  crashed  system,  it  is  clear 
there  is  a  problem  and  a  system  di¬ 
agnosis  can  reveal  the  cause.  Tech¬ 
nicians  can  fix  the  problem  and  bring 
the  system  back  on  line. 

If  a  system  experiences  a  Y2K  re¬ 
lated  problem  but  does  not  crash, 


Market  and  legal  pressures  continue 
to  drive  the  majority  of  the  decisions 
made  within 

business,  including 
Y2K  decisions.  A 
National  Federation 
of  Independent 
Business  (NFIB) 

Y2K  study  correctly 
noted  that  “informa¬ 
tion  describing  the 
[Y2K]  problem 
needs  to  address 
consequences  of 
inaction  if  it  is  to 
stimulate  action.” 

Although  this  study 
provides  an  assessment  of  the  pre¬ 
paredness  of  small  business,  there  is 
no  community-wide  assessment  of 
Y2K  preparedness  within  overall 
business.  However,  as  has  been  the 


"We  must  get  the  a  t- 

TENTION  OF  TOP  MAN¬ 
AGEMENT  AND  RECOGNIZE 
THAT  THIS  IS  NOT  AN  IT 

problem...  This  is  a 

MANAGEMENT  CHALLENGE 
THAT  MUST  BE  ADDRESSED 
BY  THE  HIGHEST  CEO 
IMMEDIATELY.” 

Senator  Bob  Bennett - 
June  2,  1998 


the  system  may  continue  to  operate 
with  the  problem  going  unnoticed. 

System  users  will 
likely  continue  to  use 
the  system  trusting  it 
is  operating  correctly 
and  the  data  or 
calculations  it  yields 
are  correct.  By  the 
time  the  problem  is 
identified,  data  may 
have  been  corrupted, 
business  processes 
incorrectly  run,  and 
so  forth.  The  impact 
of  a  Y2K  problem 
such  as  this  may  far 
outreach  the  offending  system  to 
those  systems  with  which  it  inter¬ 
faces.  Interfaces  provide  a  conduit 
where  one  system’s  errors  could 
propagate  through  numerous  others. 


case  in  previous  Committee  hear¬ 
ings,  the  larger  companies  that  have 
adequate  resources  to  address  the 
issue  are  generally  in  a  better  posi¬ 
tion  regarding  their  Y2K  efforts  than 
small-  and  medium-sized  compa¬ 
nies. 


Alan  Arnold,  a  senior  Ernst  and 
Young  manager,  cites  some  person¬ 
ally  observed  examples  of  Y2K 
problems.  He  notes  that  orders  did 
not  process  correctly,  supply  chan¬ 
nels  failed,  accounting  reports  aged 
incorrectly  and  invoice  systems  billed 


incorrectly.  Certainly  payroll 
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systems  are  date-sensitive  as  they 
perform  trivial  to  complex  salary- 
related  calculations.  These  are  only 
topical  examples  of  the  Y2K  prob¬ 
lem. 


MAJOR  INITIATIVES 


Northwest  Year  2000  Summit 

Key  Oregon  businesses  and  indus¬ 
tries  provided  expert  testimony  on 
July  1,  1998,  at  the  Northwest  Year 
2000  Summit  held  in  Portland,  Ore¬ 
gon.  Senator  Gordon  Smith,  a  mem¬ 
ber  of  the  Special  Committee  on  the 
Year  2000  Technology  Problem,  ini¬ 
tiated  and  presided  over  the  event 
geared  toward  assessing  the  poten¬ 
tial  impact  of  Y2K  on  both  small  and 
big  businesses.  Additionally,  Senator 
Smith  focused  on  the  question  “What 
role,  if  any,  should  the  federal  gov¬ 
ernment  play  with  respect  to  Year 
2000  technology  issues?” 

Following  testimony  from  Integrated 
Measurement  Systems,  Intel  Corpo¬ 
ration,  WRG  Design  Company, 
Providence  Health  System,  and 
Bank  of  America,  the  audience  ac¬ 
tively  participated.  The  audience 
consisted  of  individuals  from  the 
American  Electronics  Association, 
local  business  groups  and  the  Tu¬ 
alatin  Valley  Economic  Development 
Corporation. 

The  testimony  emphasized  the  need 
to  prioritize  efforts  to  concentrate  on 
those  issues  that  are  critical  to  hu¬ 


man  safety,  defense,  and  well-being. 
This  clearly  was  one  of  the  Commit¬ 
tee’s  first  tasks  as  it  established  its 
eight  sector  areas:  utilities,  health 
services,  telecommunications,  trans¬ 
portation,  finance,  general  govern¬ 
ment,  general  business  and  litigation 
(in  priority  order).  Concerns  about 
litigation  were  heard  numerous  times 
both  in  the  context  of  limiting  frivo¬ 
lous  lawsuits  and  providing  protec¬ 
tion  for  statements  made  in  good 
faith.  Certainly,  the  latter  was  ad¬ 
dressed  when  the  Year  2000  Infor¬ 
mation  and  Readiness  Disclosure 
Act  became  law  on  October  1 9th. 

Finally,  the  issue  of  compliance  cer¬ 
tification  validity  was  raised.  This  is¬ 
sue  has  yet  to  be  resolved.  However, 
the  Committee  continues  to  empha¬ 
size  the  need  for  audits  as  well  as 
independent  verification  and  valida¬ 
tion  as  a  crucial  element  of  a  sound 
Y2K  program. 

A  Hearing  -  Small  Businesses  to 
Global  Corporations:  Will  They  Sur¬ 
vive  the  Year  2000? 

On  October  7,  1998,  the  Special 
Committee  on  the  Year  2000  Tech¬ 
nology  Problem  held  a  hearing  fo¬ 
cusing  on  areas  within  the  general 
business  sector.  As  with  previous 
sector  hearings,  the  purpose  of  the 
hearing  was  to  increase  awareness 
and  disseminate  reliable  prepared¬ 
ness  information  as  well  as  facilitate 
and  stimulate  solutions.  Committee 
work  supports  polls  showing  only  a 
small  percentage  of  the  American 
population  has  even  heard  of  Y2K. 
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Awareness  is  a  continual  process 
that  will  extend  up  to  and  past  Janu¬ 
ary  1 , 2000. 

During  the  hearing,  a  reoccurring 
theme  appeared  throughout  the  ex¬ 
amination  of  the  supply  chain,  from 
global  corporations  to  small-  and 
medium-sized  business.  Witnesses 
talked  about  a  move  from  high-risk 
vendors  to  lower  risk  vendors. 
Senator  Bennett  concluded,  “as  a 
result  of  Y2K,  we  are  going  to  see 
significant  shifts  in  where  people  go 
for  materials,  where  people  go  for 
markets.  It  will  produce  some  very 
challenging  social  problems  all  over 
the  world.  Those  countries  and  com¬ 
panies  that  survive  and  thrive  as  a 
result  of  the  long-range  planning  that 
they  have  done  will  be  called  upon  to 
provide  aid  and  assistance  in  those 
parts  of  the  world  where  those  chal¬ 
lenges  exist.  I  think  the  social  impact 
of  this  is  beyond  anything  we  had 
previously  thought  it  might  be.” 

Witnesses  at  this  hearing  provided 
testimony  that  looked  at  the  overall 
business  community  preparedness, 
both  domestically  and  internationally, 
of  small  and  large  business,  and 
used  the  pharmaceutical  industry  as 
a  case  study.  Opening  the  hearing,  a 
special  witness  highlighted  the  pos¬ 
sible  personal  and  dramatic  nature  of 
the  Y2K  problem.  Laurene  West 
shared  her  story  and  concerns  to 
bring  a  human  face  to  the  Y2K 
problem. 

West’s  personal  testimony  dramati¬ 
cally  depicted  the  critical  depend¬ 
ency  that  many  Americans  have  on 


the  pharmaceutical  industry.  Without 
a  daily  supply  of  medication  and  the 
coordinated  efforts  of  healthcare 
providers,  Ms.  West  will  die  due  to 
the  residual  effects  of  a  brain  tumor 
and  a  postoperative  infection.  She 
has  34  years  experience  within 
healthcare:  20  as  a  registered  nurse 
and,  most  recently,  14  years  devel¬ 
oping  and  implementing  medical  in¬ 
formation  systems.  Her  primary 
message  was  that  many  Americans 
would  feel  the  impact  of  medication 
supply  and  distribution  disruptions 
that  are  possible  from  Y2K.  During 
her  testimony,  she  explored  issues 
related  to  stockpiling  medication  for 
those  dependent  upon  regular  drug 
doses. 

Testimony  from  pharmaceutical  rep¬ 
resentatives  later  in  the  hearing  re¬ 
sponded  to  Ms.  West’s  supply  chain 
issues.  Richard  Carbray,  General 
Manager  of  Pleton’s  Pharmacy  and 
Home  Health  Centers,  noted  that  at 
the  pharmacy  level,  it  is  possible  to 
identify  groups  of  patients  through 
their  systems  to  ensure  plentiful  and 
sufficient  quantities  of  medication  are 
on-hand  for  each  particular  group.  At 
the  same  time,  he  cautioned  that  in¬ 
dividuals  getting  an  excess  supply 
unnecessarily  might  cause  the  avail¬ 
able  supply  to  change  drastically.  Dr. 
Charles  Popper,  CIO  of  Merck  &  Co., 
echoed  the  caution  noting  that 
stockpiling  an  excess  supply  would 
likely  cause  more  harm  than  good. 
Dr.  Popper  believes  that  a  more  fo¬ 
cused  approach  will  aid  in  under¬ 
standing  what  steps  are  necessary 
to  cover  this  situation.  However, 
good  data  are  necessary.  The 
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Vital  Signs  2000  survey  will  facilitate 
identifying  supply  chain  sensitivities 
and  risks. 

Despite  tremendous  progress  in  re¬ 
solving  Y2K  problems  throughout 
1998,  much  work  remains  in  the  lim¬ 
ited  time  available.  Almost  a  quarter 
of  all  companies  worldwide,  regard¬ 
less  of  size  or  industry,  has  yet  to 
start  any  Y2K  effort,  according  to 
testimony  by  Lou  Marcoccio,  Rre- 
search  Director  for  the  Gartner 
Group.  While  the  heavily  regulated 
insurance,  investment  services  and 
banking  industries  are  the  most  ad¬ 
vanced  in  their  efforts,  the 
healthcare,  oil,  education,  agricul¬ 
ture,  farming,  food  processing  and 
construction  industries  are  lagging 
dangerously  behind. 

Closely  tied  to  the  issue  of  failures  is 
a  misunderstanding  of  the  Y2K 
problem.  Many  mistakenly  think  that 
Y2K  problems  will  only  manifest 
themselves  at  the  stroke  of  midnight 
on  December  31,  1999.  However, 
Y2K  problems  have  been  occurring 
over  the  years  and  will  continue  to 
increase  in  occurrence  as  we  ap¬ 
proach  January  1,  2000.  Further¬ 
more,  they  will  continue  to  arise  at  a 
diminishing  rate  in  the  months  fol¬ 
lowing  January  2000. 

Mr.  Marcoccio  ended  his  testimony 
focusing  on  specific  risks  to  the 
United  States,  stating,  “from  a  do¬ 
mestic  perspective,  the  risks  that  we 
have  identified  or  highlighted  as  be¬ 
ing  most  important  are  the  interrup¬ 
tions  or  failures  due  to  interdepend¬ 
encies  and  interconnections,  be¬ 


tween  companies  and  countries.” 
From  an  international  perspective, 
Gartner  Group’s  research  indicates 
key  foreign  government  agencies  will 
likely  experience  significant  failures. 
This  fact  highlights  the  critical  nature 
and  risk  exposure  of  the  interrela¬ 
tionship  between  our  government 
agencies  and  militaries. 

Shifting  the  focus  to  small  business, 
the  Honorable  Fred  Hochberg,  Dep¬ 
uty  Administrator,  Small  Business 
Administration  (SBA),  testified  that  to 
some  extent,  all  of  the  nation’s  23.6 
million  small  businesses  may  be  af¬ 
fected  by  Y2K.  Their  exposure  is  due 
to  their  reliance  on  office  automation 
-  hardware,  software  or  equipment 
with  embedded  chips  -  any  of  which 
may  be  non-Y2K  compliant.  To  as¬ 
sist  the  nation’s  small  businesses  as 
they  cope  with  Y2K,  the  SBA  em¬ 
phasizes  a  three-step  program: 

1)  conduct  a  self-assessment 
to  identify  possible  affected 
computer  hardware  and 
software  in  addition  to  any 
equipment  using  embedded 
chips, 

2)  take  action  immediately,  and 

3)  stay  informed  about  Y2K  is¬ 
sues.  Included  in  this  proc¬ 
ess  are  efforts  to  assess  the 
Y2K  status  of  businesses’ 
suppliers  and  distributors  as 
well  as  contingency  plan 
development. 

Although  it  may  be  “too  late  to  start 
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early,”  it  is  not  too  late  to  start. 

When  questioned  about  the  avail¬ 
ability  of  loans  for  small  businesses 
to  initiate  Y2K  efforts,  Mr.  Hochberg 
noted  that  all  of  SBA’s  loan  pro¬ 
grams  today  are  available  for  Y2K 
remediation  work.  Senator  Gordon 
Smith  concluded  from  further  expla¬ 
nation,  “there  is  really  no  reason 
people  should  not  be  doing  this 
[taking  action  on  Y2K]  in  small  busi¬ 
ness.” 

The  NFIB  report,  “Small  Business 
and  the  Y2K  Problem,"  sponsored  by 
the  Wells  Fargo  Bank,  is  discussed 
in  the  assessment  section  below. 
Later  in  this  section,  the  Manufac¬ 
turing  Extension  Program  (MEP) 
Y2K  toolkit  is  covered  as  a  resource 
to  small  manufacturing  businesses 
for  Y2K  information.  Representatives 
of  both  the  NFIB  and  MEP  testified 
during  the  hearing. 

National  Y2K  Action  Week 

The  President’s  Council  on  Year 
2000  Conversion  designated  Octo¬ 
ber  19  -  23  as  “National  Y2K  Action 
Week.”  While  many  large  firms  have 
grasped  how  a  Y2K  failure  could  se¬ 
verely  affect  their  futures,  smaller 
firms  seem  more  focused  on  their 
immediate  problems.  Therefore,  on 
October  19  ,  the  President’s  Council 
on  Year  2000  Conversion  and  more 
than  100  private  sector  organizations 
launched  “National  Y2K  Action 
Week.”  The  goal  was  to  motivate 
managers  of  small-  and  medium¬ 
sized  companies  to  take  the  neces¬ 


sary  steps  to  ensure  that  the  tech¬ 
nologies  they  and  their  business 
partners  depend  upon  are  Y2K 
ready.  The  program  core  consisted 
of  hundreds  of  educational  events 
hosted  by  federal  government  field 
offices.  Participating  entities  in¬ 
cluded  the  following: 

•  SBA’s  69  district  offices,  935 
small  business  development 
centers,  65  business  infor¬ 
mation  centers,  35  women’s 
business  information  centers 
and  18  tribal  business  in¬ 
formation  centers; 

•  the  Department  of  Com¬ 
merce’s  400  manufacturing 
extension  partnership  offices 
and  65  minority  business 
development  centers; 

•  USDA’s  3,100  county  exten¬ 
sion  offices; 

•  the  Social  Security  Admini¬ 
stration’s  1,350  field  offices; 
and 

•  the  Department  of  Trans¬ 
portation’s  120  field  offices. 

These  offices  helped  managers  as¬ 
sess  their  businesses’  Y2K  vulner¬ 
abilities,  develop  strategies  for  re¬ 
mediation  and  replacement  work, 
find  technical  resources  for  ad¬ 
dressing  the  problem  and  formulate 
contingency  plans.  To  further  ad¬ 
dress  concerns  of  businesses,  SBA 
has  a  small  business  answer  desk, 
1-800-827-5722,  which  provides 
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personalized  response  and  assis¬ 
tance. 

Manufacturing  Extension  Program 
(MEP)  -  Conversion  2000 

MEP  is  a  ready  resource  for  small- 
and  medium-sized  manufacturing 
businesses.  As  a  non-profit  program 
of  the  Department  of  Commerce’s 
National  Institute  of  Standards  and 
Technology  (NIST),  MEP  has  over 
400  centers  located  throughout  the 
50  states  and  Puerto  Rico.  There  are 
some  2,000  MEP  engineers  avail¬ 
able  nationally  through  these  centers 
and  field  offices.  They  work  directly 
with  area  firms  to  provide  tailored 
expertise  and  services.  Specifically 
targeting  Y2K,  NIST  and  the  national 
MEP  office  developed  a  Y2K  toolkit 
that  manufacturing  businesses  that 
desire  assistance  can  use.  Thus, 
they  are  a  prepositioned  resource 
available  to  assist  in  completing  a 
thorough  Y2K  assessment  and  in 
initiating  an  appropriate  plan  to 
remediate,  test,  and  implement  Y2K 
solutions. 

The  Y2K  self-help  tool,  Conversion 
2000,  leads  a  small  business 
through  four  phases  of  assessing 
and  structuring  a  Y2K  program. 
Phase  I  facilitates  the  internal  in¬ 
ventory  of  hardware,  software,  and 
embedded  systems.  Next,  in  Phase 
II,  a  business  criticality  assessment 
is  conducted  and  initial  criticality  in 
addition  to  confidence  ratings  are 
calculated.  Phase  III  activities  in¬ 
volve  contingency  planning.  Finally, 


Phase  IV  covers  remediation  plan¬ 
ning  and  management. 

Although  this  Y2K  tool  does  not 
solve  the  Y2K  problem  for  a  busi¬ 
ness,  it  puts  a  business  well  on  the 
road  to  soundly  addressing  Y2K, 
providing  a  roadmap  of  sorts.  Fur¬ 
thermore,  documentation  produced 
from  the  use  of  Conversion  2000  will 
assist  in  application  processing  for 
SBA  fast  track  loans  for  Y2K. 

Cooperative  State  Research.  Educa¬ 
tion.  and  Extension  Service 
(CSREES).  USDA  -  Y2K  Community 
Awareness  Outreach 

CSREES  is  designed  to  be  an  agent 
for  change  and  an  international 
research  and  education  network. 
Part  of  CSREES’  mission  is  to 
promote  informed  decision-making 
by  producers,  families,  communities 
and  other  customers  through 
partnerships  with  public  and  private 
sectors  that  maximizes  limited 

resources’ 
effectiveness. 
Included  in 
CSREES  are 
over  9,600 
local  extension 
agents  working 
in  3,150 

counties  nationwide;  farm  safety 
education  programs  in  all  50  states 
and  Puerto  Rico;  as  well  as 
international  education  programs 
taught  by  over  200  extension 
professionals  in  1 7  countries. 

As  part  of  National  Action  Week, 
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CSREES  rolled  out  its  recently  de¬ 
veloped  Y2K  Community  Awareness 
Outreach  Toolkits.  Five  thousand  of 
these  “toolkits”  were  distributed  to  all 
county  extension  offices,  USDA  For¬ 
eign  Agriculture  Service’s  Agricul¬ 
tural  Attaches,  State  Agriculture 
Commissioners,  National  Agricultural 
Statistics  Service  State  Directors,  the 
Land-Grant  University  System,  1994 
Tribal  Colleges  and  the  Hispanic 
Serving  Institutions. 

Each  “toolkit”  consists  of  fact  sheets, 
a  media  and  information  plan,  a 
press  release 

template,  public  serv¬ 
ice  announcements 
(both  written  and 
recorded),  a  general 
public  brochure,  talking 
points  and  frequently 
asked  questions.  The 
fact  sheets  include: 

“Creating  a  Year  2000 
Computer  Action  Plan.”  “Is  Your 
Computer  Ready  for  Y2K.”  “Prepar¬ 
ing  for  the  Year  2000  Computer 
Challenge”  and  “The  Y2K  Problem 
and  Embedded  Systems.” 

During  the  kick-off  of  National  Y2K 
Action  Week,  USDA  Deputy  Secre¬ 
tary  Richard  Rominger  noted  that  a 
memorandum  of  understanding 
(MOU)  between  the  Departments  of 
Agriculture  and  Commerce  had  been 
signed.  The  MOU  focused  on  the 
needs  of  small  businesses  and 
manufacturers.  As  an  outcome,  it  is 
likely  that  CSREES’  “Y2K  Toolkit” 
may  merge  with  MEP’s  Conversion 
2000  to  form  a  single,  more  compre¬ 
hensive  “toolkit." 


ASSESSMENTS 


National  Federation  of  Independent 
Business  (NFIB) 

On  May  26,  1998,  William  Dennis, 
Senior  Research  Fellow  for  NFIB, 
published  the  report  Small  Business 
and  the  Y2K  Problem.  One  of  the 
most  telling  findings  of  the  report 
was  that  over  80%  of  American  small 
businesses  are  potentially  exposed 
to  Y2K  problems.  In  Dennis’  October 
7th  testimony,  he 
further  described  the 
general  assessment  of 
small  business.  “A  fifth 
of  them  do  not 
understand  that  there 
is  a  Y2K  problem.  .  .  . 
They  are  not  aware  of 
it.  A  fifth  of  them  are 
currently  taking  action. 
A  fifth  have  not  taken  action  but  plan 
to  take  action,  and  two-fifths  are 
aware  of  the  problem  but  do  not  plan 
to  take  any  action  prior  to  the  year 
2000.” 

Approximately  330,000  small  busi¬ 
nesses  that  are  computer  dependent 
fall  into  this  last  two-fifths  category. 
Dennis  suggests  that  if  they  lose 
their  computers  or  if  their  computers 
malfunction,  it  will  result  in  a  produc¬ 
tion  or  sales  loss  of  85%.  They  will 
be  out  of  business,  effectively,  until 
they  fix  the  problem. 

Over  82%  of  small  businesses  have 
some  level  of  direct  Y2K  exposure 
due  to  their  reliance  on  information 


“TO  STIMULATE  ACTION, 
YOU  MUST  FIRST  IDENTIFY 
THE  CONSEQUENCES  OF 
INACTION.” 

Mr.  William  Dennis, 
NFIB 
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technology  and  automation.  The 
large  majority  of  them,  81%,  indicate 
awareness  of  the  exposure.  How¬ 
ever,  only  half  have  taken  or  plan  to 
take  action  in  response  to  the  expo¬ 
sure.  The  lack  of  action  apparently 
comes  from  77%  of  small  busi¬ 
nesses  not  considering  Y2K  to  be  a 
serious  problem. 

Indirect  exposures  to 
Y2K  are  sometimes 
overlooked.  Figure  1 
identifies  some  of  the 
sources  of  indirect  ex¬ 
posure  that  small 
businesses  face.  These 
exposures  result  from 
electronic  interaction 
with  business  partners.  Seventy-five 
percent  of  small  businesses  deal 
electronically  with  partners  and  thus 
are  exposed  to  possible  Y2K  impacts 
if  their  partners  are  not  prepared  for 
Y2K.  Exposure  due  to  electronic  in¬ 
teractions  with  financial  institutions  is 
clearly  the  smallest  of  those  sources 


identified  in  NFIB’s  report.  This  ex¬ 
posure  is  probably  smaller  yet,  since, 
as  an  industry,  financial  institutions 
are  generally  considered  to  be  out 
front  in  their  Y2K  efforts. 

Medium-sized  businesses  may  actu¬ 
ally  face  the  greatest  overall  Y2K 
exposure.  Small  businesses  are 
likely  to  have  less  technology  inser¬ 
tion  within  the  business 
community.  In  many 
cases,  they  may  have 
the  capability  to  go  back 
to  manual  processing,  if 
necessary.  Even 

though  small 

businesses  generally 
lack  the  resources  to 
adequately  address  Y2K  issues,  the 
impact  of  a  failure  is  likely  to  be 
moderate.  Medium-sized  busi¬ 
nesses,  on  the  other  hand,  are  more 
likely  to  depend  heavily  on  technol¬ 
ogy.  Manual  processing  may  no 
longer  present  a  viable  option  for 
medium-sized  businesses.  They  may 
also  lack  the  appropri¬ 
ate  resources  to  reme¬ 
diate  affected  systems 
and  devices.  Given 
that  small  and  me¬ 
dium-sized  businesses 
provide  over  51%  of 
the  private  sector  out¬ 
put,  the  lack  of  action 
on  their  part  may 
translate  into  a  larger 
ripple  that  moves 
through  the  closely 
linked  supply  chain. 

The  NFIB  report  Small 
Business  and  the 


Percent 

Figure  1 :  Small  Businesses  With  Indirect  Y2K  Expo¬ 
sure 


30-50%  OF  ALL 
COMPANIES 
WORLDWIDE  WILL 
EXPERIENCE  AT  LEAST 
ONE  MISSION-CRITICAL 
FAILURE 
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Y2K  Problem  is  being  updated.  Data 
collection  is  complete  for  the  update 
and  its  analysis  is  underway.  The 
update  should  indicate  the  success 
of  National  Y2K  Action  Week. 


The  Gartner  Group 

The  Gartner  Group  bases  its  re¬ 
search  and  analysis  on  data  gath¬ 
ered  from  15,000  companies  in  87 
countries.  Data  is  updated  every  90 
days.  The  Gartner  Group’s  research 
has  concluded  that  of  all  companies 
and  government  agencies,  23% 
have  yet  to  begin  any  Y2K  action.  Of 
these  companies,  83%  fall  into  the 
category  of  small  companies. 

Lou  Marcoccio  explained  during  the 
October  7th  hearing  that  “a  mission- 
critical  failure  means  that  a  business 
interruption  is  likely  to  occur.  It  could 
affect  revenue  and  will  likely  affect 
the  continued  operation  of  that  busi¬ 
ness.”  The  Gartner  Group  predicts 
that  30%  to  50%  of  all  companies 
worldwide  will  experience  at  least 
one  mission-critical  failure.  Within 
the  United  States,  that  percentage 
drops  to  15%.  The  typical  amount  of 
time  that  one  of  these  critical  failures 
is  expected  to  last  is  at  least  3  days 
at  a  recovery  cost  of  between 
$20,000  and  $3,500,000  (this  esti¬ 
mated  cost  does  not  include  any 
costs  related  to  possible  litigation). 

Figure  2  graphically  portrays  the 
number  of  companies  expected  to 
experience  at  least  one  mission- 
critical  failure.  Gartner  predicts  there 
is  an  80%  probability  that  these  ex¬ 


pectations  are  correct.  The  horizon¬ 
tal  axis  indicates  the  size  of  com¬ 
pany  and  government  agencies.  The 
vertical  axis  indicates  the  percentage 
of  all  companies  or  government 
agencies  of  a  particular  size  that  are 
expected  to  experience  at  least  one 
mission-critical  failure. 


Size 

Figure  2:  Predicted  Mission-Critical  Failures 


Shifting  to  looking  at  predicted  mis¬ 
sion-critical  failures  by  industry  sec¬ 
tor,  some  logical  conclusions  can  be 
drawn.  Those  industries  that  are 
most  likely  to  have  experienced  a 
Y2K  related  problem  earliest  gener¬ 
ally  began  to  address  the  problem  at 
that  time.  However,  it  is  interesting  to 
note  that  often  they  did  not  begin 
addressing  the  problem  from  a  total 
business  perspective.  Frequently, 
only  those  areas  of  the  business  that 
experienced  the  failure  or  were  most 
closely  related  to  it  were  addressed. 

Heavily  regulated  industries  also  are 
generally  in  a  better  position  with 
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their  Y2K  efforts  than  those  without 
regulation.  Gartner’s  research  covers 
companies  and  organizations  across 
27  industries.  As  with  its  predictions 
for  mission-critical  systems  based  on 
size  (figure  2),  it  has  developed  fail¬ 
ure  predictions  for  companies  within 
these  27  industries.  To  characterize 
these  predictions,  Gartner  estab¬ 
lished  four  risk  categories. 

Each  risk  category,  identified  in  the 
far-right  column  of  figure  3,  de¬ 
scribes  the  percentage,  in  the  far-left 
column  of  figure  3,  of  companies  in 
industries  within  the  category  that 
will  experience  at  least  one  mission- 
critical  system  failure.  Taken  alone, 
one  mission-critical  system  failure 
does  not  sound  like  much.  However, 
when  you  understand  that  thousands 
to  hundreds  of  thousands  of  failures 


may  occur  either  simultaneously  or 
nearly  simultaneously,  the  situation 
is  much  more  serious. 

Data  provided  by  the  Gartner  Group 
and  depicted  in  figure  3  clearly 
demonstrate  that  much  work  remains 
as  we  approach  Y2K.  For  example, 
50%  of  companies  within  the  trans¬ 
portation  industry  will  experience  at 
least  one  mission-critical  failure. 
Thus,  the  figure  highlights  those  in¬ 
dustries  critical  to  our  country’s  infra¬ 
structures  that  must  continue  to  ag¬ 
gressively  execute  their  Y2K  plans 
as  well  as  develop  realistic  and  fea¬ 
sible  contingency  plans. 


15% 

Insurance,  Investment  Services,  Banking,  Pharmaceuticals, 
Computer  Manufacturing 

| 

33% 

Heavy  Equipment,  Aerospace,  Medical  Equipment  Software, 

Sill 

1 

Semiconductor,  Telecom,  Retail,  Discrete  Manufacturing, 

Publishing,  Biotechnology,  Consulting 

tlltf 

Chemical  Processing,  Transportation,  Power,  Natural  Gas, 

50% 

Water,  Oil,  Law  Practices,  Medical  Practices,  Construction, 

lAte 
:  ■■ 

Transportation,  Pulp  &  Paper,  Ocean  Shipping,  Hospitality, 

Broadcast  News,  Television,  Law  Enforcement 

66% 

Education,  Healthcare,  Government  Agencies,  Farming  & 

4 

Agriculture,  Food  Processing,  Construction, 

Citv  &  Town  Municipal  Services 

Figure  3:  Failure  Predictions  by  Industry 
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CONCERNS 


i  th 

In  preparation  for  the  October  7 
hearing,  the  Committee  staff  con¬ 
ducted  interviews  with  a  variety  of 
knowledgeable  parties.  Interviewees 
included  federal  agencies  with  pur¬ 
view  over  many  aspects  of  business, 
especially  those  related  to  small 
business  and  the  food  industry;  large 
businesses  in  manufacturing,  distri¬ 
bution,  and  retail;  and  trade  organi¬ 
zations  representing  a  cross  section 
of  the  business  community. 

International  Business 

All  global  corporations  obviously 
have  dependencies  on  other  coun¬ 
tries  of  the  world,  certainly  to  export 
their  products,  but  also  to  import  key 
supplies  and  raw  materials  for  end 
products  produced  in  the  U.S.  Ex¬ 
amples  of  these  dependencies  are 
automobile  parts  from  Southeast 
Asia,  oil  from  Venezuela  and  insulin 
from  Denmark.  Y2K  information  is 
sparse,  both  on  the  international 
companies  themselves  as  well  as 
the  infrastructure  of  the  countries 
where  they  reside.  The  U.S.  is  pur¬ 
portedly  the  leader  in  Y2K  remedia¬ 
tion.  This  suggests  that  other  coun¬ 
tries  are  dangerously  behind.  Many 
have  not  even  begun  to  address  the 
problem.  Thus,  we  should  remain 
very  skeptical  about  our  ability  to  buy 
or  sell  goods  from  certain  parts  of 
the  world. 

With  the  main  exception  of  the 
United  Kingdom,  the  Netherlands 


and  Scandinavia,  European  coun¬ 
tries  have  taken  a  strikingly  relaxed 
attitude  to  Y2K.  A  main-board  di¬ 
rector  of  a  leading  French  bank  said, 
“The  year  2000  question  is  a  con¬ 
spiracy  cooked  up  by  the  Americans 
and  the  British  to  create  a  smoke¬ 
screen  and  distract  attention  away 
from  preparations  for  the  single 
European  currency.”  The  situation  in 
Russia  and  China  is  even  worse 
than  in  Europe. 

Small  and  Medium  Business  (Fewer 
Than  500  Employees) 

In  a  recent  article  by  the  president  of 
NFIB,  possible  consequences  for 
small-  and  medium-sized  businesses 
were  outlined:  automatic  funds 
transfers  and  direct  deposits  may  be 
disrupted,  fail,  or  occur  at  the  wrong 
time;  telephonic  voice  mail  may  fail; 
and  fax  machines  may  cease  to 
properly  transmit  to  and  receive  from 
customers.  Mr.  Dennis,  the  NFIB 
hearing  witness,  has  stated  that 
“more  than  330,000  firms  risk  closing 
their  doors  until  the  problem  is  fixed, 
and  more  than  370,000  others  could 
be  temporarily  crippled.” 

Another  example  of  how  critical  Y2K 
preparation  by  small-  and  medium¬ 
sized  businesses  has  become  was 
published  in  a  recent  issue  of  CIO 
Communications,  Inc  publication. 
The  example  highlights  the  possible 
indirect  consequence  of  failure  to 
act.  Sears  Roebuck  links  5,000  ven¬ 
dors  into  their  EDI/  telecommunica¬ 
tions  network.  Of  those,  only  18% 
have  been  identified  as  critical  to 
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Sears’  business  processes.  Thus, 
82%  of  their  current  business  part¬ 
ners  -  primarily  small  businesses  - 
were  deemed  non-critical.  As  a  tri¬ 
age  approach  to  looking  at  work  pri¬ 
oritization  and  resource  allocation  in 
addressing  potential  Y2K  problems 
is  necessary,  this  same  approach  is 
being  applied  by  larger  business  as 
they  assess  Y2K  related  risk  associ¬ 
ated  with  their  vendors.  Once  a  ven¬ 
dor  has  not  passed  muster  in  this 
context,  it  is  possible  it  will  lose  the 
business  relationship  permanently 
resulting  in  a  devastating  impact  on 
its  business. 


PHARMACEUTICALS 


While  generally  considered  to  be  one 
of  the  leaders  in  the  Y2K  remediation 
effort,  pharmaceuticals  are  caught  in 
the  classic  squeeze  of  dependency 
on  suppliers  and  distributors.  Be¬ 
cause  of  FDA  regulations  intended  to 
protect  the  public,  pharmaceutical 
companies  must  have  a  pre¬ 
approved  ingredient  supplier  whose 
product  is  registered  upon  arrival  for 
a  particular  drug  product  batch.  This 
means  that  a  constant  supply  source 
is  critical  to  the  drug  manufacturing 
process.  On  the  sales/distribution 
side,  the  companies  sell  80%  of  their 
product  through  wholesale  drug 
firms,  thus  requiring  minimal  direct 
sales.  It  is  essential  for  success  that 
both  sides  of  the  equation  function 
effectively  through  this  Y2K  window 
of  risk.  The  pharmaceutical  compa¬ 
nies  are  encouraging  their  col¬ 


leagues  in  allied  businesses  to  be 
Y2K  prepared. 


FOOD  INDUSTRY 


A  $25  billion  (U.S.  $)  international 
food  retailer  with  chain  stores  in  the 
U.S.,  Europe,  Latin  America,  and 
Asia  described  a  Y2K  experiment 
that  was  conducted  in  one  of  its 
stores.  It  set  the  date  for  the  store’s 
computers  to  Y2K.  The  effect  was 
“the  computers  shut  down  the  store 
in  5  minutes.  Everything  was  shut 
down.  The  security  systems,  the 
temperature  controls,  the  safes,  the 
front  end.  Everything.” 

The  Food  Marketing  Institute  pub¬ 
lished  a  Y2K  white  paper  that  further 
illustrated  possible  consequences  of 
failure  to  act: 

•  ordering  systems  will  ship  the 
wrong  products  and  incorrect 
quantities  due  to  date  errors  in 
complex  calculation  routines, 

•  point-of-sale  systems  will  have 
wrong  prices  because  the  host 
system  selects  the  wrong  item 
maintenance  records, 

•  customers  will  be  frustrated  by 
frequent  shopper  systems  that 
don’t  provide  expected  rewards 
due  to  failures  in  purchase  history 
date  calculations, 

•  credit  cards  will  be  rejected  if 
their  expiration  dates  are  beyond 
Y2K, 
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•  food  manufacturers  will  label 
products  with  incorrectly  calcu¬ 
lated  “sell  by”  dates,  causing  po¬ 
tential  illness, 

•  pharmacy  systems  will  cancel 
prescription  benefits  due  to  date 
problems  and 

•  security  systems  will  allow  suspi¬ 
cious  activity  to  continue  due  to 
date  tracking  errors. 

Any  interruption  within  the  farm-to- 
fork  chain  can  result  in  a  direct  loss 
to  those  who  supply  food,  likely 
translating  into  food  shortages  and 
price  increases.  As  is  the  case  with 
many  businesses,  food  suppliers  are 
increasingly  dependent  on  comput¬ 
erized  processing  and  information 
exchange.  For  example,  farmers 
and  ranchers  use  electronic  equip¬ 
ment  irrigation  systems,  animal  feed 
systems  and  transport  systems. 
Processors  rely  on  automated  sys¬ 
tems  that  help  prepare  and  package 
consumer-ready  products.  Distribu¬ 
tors,  wholesalers  and  retailers  de¬ 
pend  on  computer-driven  equipment 
to  transport,  deliver,  store,  display 
and  sell  food  products,  and  inventory 
and  accounting  systems.  They  rely 
further  on  equipment  with  time- 
dependent  embedded  computer 
chips,  such  as  harvesting  equipment; 
grain  elevators;  plant,  warehouse 
and  truck  refrigeration  systems;  store 
and  plant  security  systems;  and 
heating,  ventilation  and  air  condi¬ 
tioning  (HVAC)  systems. 

Committee  efforts  to  coordinate  in¬ 
terviews  as  well  as  to  secure  wit¬ 


nesses  for  hearings  met  significant 
resistance.  This  resistance  and  non¬ 
responsiveness  came  from  both  in¬ 
dustry  trade  organiza¬ 

tions/associations  as  well  as  major 
corporations  within  the  retail  and 
manufacturing  sides  of  the  food  in¬ 
dustry.  Both  food  retailers  and 
manufacturers  cited  numerous  rea¬ 
sons  for  their  resistance. 

As  of  the  105th  Congress,  the  gen¬ 
eral  preparedness  of  the  food  indus¬ 
try  is  not  clear.  The  reluctance  to 
provide  public  witness  is  certainly 
disturbing.  Put  in  the  context  of  the 
Gartner  Group’s  assessment  of  the 
food  processing  and  farm¬ 
ing/agriculture  status,  it  is  possibly 
alarming.  Gartner  predicts  there  is  a 
better  than  66%  chance  of  at  least 
one  mission-critical  failure  within 
each  of  these  industries  (see  figure 
3).  In  testimony,  Gartner’s  Marcoccio 
stated,  “An  industry  highly  over¬ 
looked  is  agriculture  (farming,  food 
processing,  transportation/  distribu¬ 
tion,  and  import  and  export  of  foods 
and  food  bi-products).  Several  agri¬ 
culture  sub-industries  are  lagging  far 
behind.” 


CHEMICAL  MANUFACTURING 


Overview: 

Virtually  every  consumer  product  is 
critically  dependent  on  the  chemical 
manufacturing  industry.  Cars  and 
trucks,  for  instance,  depend  on  thou¬ 
sands  of  chemicals  -  from  polyure¬ 
thane  seat  cushions  and  neoprene 
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hoses  and  belts  to  air  bags  and  ny¬ 
lon  seat  belts. 

Chemical  manufacturing  is  also  vital 
to  the  overall  U.S.  economy.  In 
1997,  $69.5  billion  in  chemicals  were 
exported,  which  was 
10  cents  of  every  ex¬ 
port  dollar.  This 
topped  agriculture’s 
$55.9  billion  of  ex¬ 
ports  and  aviation’s 
$38.3  billion.  In 
meeting  the  demands 
of  the  of  U.S.  industry, 
in  1997,  the  chemical  industry 
shipped  $392  billion  of  goods.  This 
was  2.1%  of  the  total  U.S.  economic 
output,  more  than  any  other  manu¬ 
facturing  sector.  Finally,  over  1  mil¬ 
lion  Americans  were  employed  by 
the  industry  in  1997. 

Y2K  Vulnerabilities  in  Chemical 
Manufacturing 

Chemical  manufacturers  are  highly 
dependent  on  computers  to  manage 
businesses  operations  and  to  control 
manufacturing  processes.  Thus, 
they  are  susceptible  to  the  Y2K 
problem  as  well.  To  quote  from  the 
Chemical  Process  Industries’  (CPI) 
leading  publication,  Chemical  Engi¬ 
neering.  “Left  unchecked,  the  Year 
2000  problem  -  called  Y2K,  for  short 
--  could  be  catastrophic  for  the 
chemical  process  industries  (CPI). 
The  date  glitch  could  cause  innu¬ 
merable  shutdowns  and  horrific  ac¬ 
cidents.  Indeed,  a  manufacturer's 
process-control  system  could  be 
stymied  by  "00"  and  shut  down  alto¬ 
gether  on  New  Year's  Eve.” 


An  example  has  already  occurred. 
“At  midnight  on  New  Year's  Eve 
1996  at  Tiwai  Point  in  South  Island, 
New  Zealand,  all  [660]  of  the  smelt¬ 
ing  potline  process  control  comput¬ 
ers  stopped  working  instantly,  si¬ 
multaneously,  and 
without  warning.  The 
Bell  Bay  plant  in 
Tasmania  shut  down 
two  hours  later  -  mid¬ 
night  local  time.” 

Major  Initiatives 

While  the  large  companies  have 
substantial  ongoing  Y2K  programs, 
at  this  time,  the  only  major  initiative 
across  the  industry  that  the  Com¬ 
mittee  is  aware  of  is  a  community 
workshop  convened  at  the  Commit¬ 
tee’s  request  on  December  18, 
1998.  The  committee  has  requested 
that  the  United  States  Chemical 
Safety  and  Hazard  Investigation 
Board  (CSB)  investigate 

•  the  extent  of  the  Y2K  problem  in 
the  automation  (both  supervisory 
control  systems  and  embedded 
systems)  that  monitors  and  con¬ 
trols  the  manufacture  of  toxic  and 
hazardous  chemicals; 

•  the  awareness  of  large,  medium 
and  small  companies  within  the 
industry  of  the  Y2K  threat; 

•  CPI  progress  to  date  in  address¬ 
ing  the  Y2K  problem; 

•  the  impact  of  this  problem  on  the 
“Risk  Management  Plans”  re¬ 
quired  in  June  1999  under  the 


“Those  most  a  t  risk 

ARE  SMALL  AND  MEDIUM 

sized  Companies.  ” 
Senator  Gordon  Smith 
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Clean  Air  Act  of  1 990; 

•  the  role  the  Federal  agencies  are 
playing  in  preventing  disasters 
due  this  problem;  and 

•  actions  to  prevent  major  disasters 
due  to  toxic  or  hazardous  chemi¬ 
cal  releases  as  the  Y2K  ap¬ 
proaches. 

Assessments 

There  are  very  few  general  Y2K  as¬ 
sessments  of  the  CPIs.  The  Gartner 
Group  provides  one  that  surfaced  in 
the  Committee’s  investigations. 
Gartner  develops  its  predictions  on 
Y2K  from  a  quarterly  survey  of  over 
15,000  companies  in  87  countries.  It 
organizes  its  survey  output  into  26 
industries,  one  of  which  is  CPI.  At 
the  October  7,  1998  Hearing  on 
General  Business  and  the  Year  2000 
Problem,  Lou  Marcoccio  of  the  Gart¬ 
ner  Group  placed  CPI  in  Gartner’s 
category  III  rating.  In  this  category, 
Gartner  predicts  that  about  50%  of 
the  companies  will  experience  at 
least  one  Y2K  mission-critical  failure. 
Gartner’s  definition  of  a  mission- 
critical  failure  is  any  business  de¬ 
pendency,  which,  if  it  were  to  fail, 
would  cause  any  of  the  following: 

•  a  shutdown  of  business,  produc¬ 
tion,  or  product  delivery  opera¬ 
tions, 

•  health  hazard  to  individuals, 

•  considerable  revenue  loss, 


•  a  significant  litigation  expense  or 
loss  or 

•  Significant  loss  of  customers  or 
revenue. 

The  Chemical  Manufacturer’s  Asso¬ 
ciation  (CMA)  met  with  Committee 
staff  following  the  October  7th  hear¬ 
ing  and  related  that  they  were 
prompted  by  Gartner’s  testimony  to 
do  their  own,  independent  industry 
survey.  Their  survey  has  begun,  but 
no  results  are  available  at  this  time. 

Concerns 

The  Committee  currently  has  two 
concerns  about  CPI.  First  is  the  po¬ 
tentially  great  public  health  risk 
posed  by  the  accidental  release  of 
toxic  or  hazardous  chemicals.  The 
Committee  is  optimistic  that  from 
what  it  has  learned,  the  very  large 
CPI  companies  are  well  along  in 
their  Y2K  preparations.  However,  as 
in  other  areas  the  Committee  has 
looked  into,  small  to  medium  firms 
are  most  likely  unprepared.  What’s 
most  bothersome  here  is  that  a  small 
firm  may  be  processing,  transporting 
or  storing  enough  dangerous  chemi¬ 
cals  to  be  a  health  or  safety  threat  to 
a  sizable  population. 

The  second  concern  has  to  do  with 
the  publicly  disclosed  risk  manage¬ 
ment  plans  required  of  firms  in  this 
industry  in  April  1999.  These  plans 
were  required  by  the  amended  Clean 
Air  Act  of  1990  to  provide  citizens 
with  accurate  information  about  po¬ 
tential  chemical  hazards  in  their 
communities.  These  plans  were  ini- 
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tiated  before  the  country  was  paying 
attention  to  the  Y2K  problem.  The 
Committee  feels  that  if  Y2K  is  not 
considered  as  a  potential  cause  of 
accidental  release  of  chemicals  that 
may  be  toxic  or  hazardous,  these 
plans  will  not  be  credible  or  accepted 
by  the  public  reviewing  them. 

In  summary,  the  Committee  is  con¬ 
cerned  that  at  this  moment  the  im¬ 
pact  of  Y2K  on  chemical  process 
safety  may  be  a  neglected  issue. 


The  Committee  is  hopeful  that  the 
President's  Council  on  Year  2000 
Conversion’s  assessments,  the 
CSB-convened  workshop  in  Decem¬ 
ber  1998,  and  the  Chemical  Manu¬ 
facturers  Association  survey  will  pro¬ 
vide  more  assurance  in  the  first 
quarter  of  1999.  The  Committee  will 
be  watching  these  developments 
carefully  and  will  be  taking  further 
action  if  more  information  is  not 
forthcoming. 
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LITIGATION 


The  prospect  of  litigation  arising  from 
Y2K-related  failures  has  been  di  s- 
cussed  since  the  Committeefe  first 
hearing.  Both  Chairman  Bennett  and 
Vice-Chairman  Dodd  recognized  that 
the  Y2K  problem  represents  an  a  t- 
tractive  target  for  abusive  lawsuits. 

From  the  beginning,  various  sectors  of 
industry  told  us  they  are  hesitant  to 
disclose  and  exchange  information 
about  their  Y2K  readinessmformation 
that  would  help  others  in  the  remedi  a- 
tion  processbecause  they  fear  la  w- 
suits  if  their  disclosures  prove  inacc  u- 
rate. 

With  the  support  of  the  White  House, 
and  in  cooperation  with  the  Senatefe 
Judiciary  Committee,  Chairman 
Bennett  and  Vice-Chairman  Dodd 
introduced  S.  2392,  the  Year  2000 
Information  Readiness  and  Disclosure 
Act.  The  Act  encourages  the  disci  o- 
sure  and  exchange  of  information 
about  the  Year  2000  computer  pro  b- 
lem  by  limiting  the  liability  of  comp  a- 
nies  that  provide  good  faith  Y2K  di  s- 
closure.  S.  2392  was  signed  into  law 
on  October  19, 1998. 


As  the  105th  Congress  came  to  an 
end,  it  became  clear  that  disclosure  of 
Year  2000  readiness  information  is 
only  one  part  of  the  problem.  Many 
businesses  are  likely  to  have  Y2K- 
related  failures.  Since  our  economic 
sectors  are  inextricably  intertwined, 
one  company^  inability  to  fulfill  its 
business  contracts  opens  it  and  all  the 
companies  that  depend  upon  it  to 
liability.  The  result  is  a  litigation 
domino  effect,  which  allows  the  Y2K 
failure  of  one  company  to  topple  all  of 
its  business  partners.  A  broad  range 
of  businesses  and  individuals  will 
suffer  some  kind  of  economic  injury, 
and  many  will  undoubtedly  seek  r  e- 
course  by  filing  lawsuits. 

In  1999,  the  Committee  plans  to  work 
together  with  the  Senate^  Judiciary 
and  Commerce  Committees  in  co  n- 
sidering  legislative  proposals  that 
would  provide  limited  liability  prote  c- 
tion  in  Y2K-related  matters.  The 
Committee  plans  to  hold  hearings  on 
the  Y2K  litigation  issue  in  order  to 
gather  facts  to  assist  the  Congress  in 
making  any  decisions  on  such  legisl  a- 
tive  proposals. 
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INTERNATIONAL  PREPAREDNESS 


Assessing  the  Y2K  preparedness  of 
the  international  community  has  pre¬ 
sented  a  special  challenge  to  the 
Committee.  While  the  Committee 
can  call  on  federal  regulators  and 
industry  representatives  to  report  on 
the  status  of  their  respective  areas,  it 
is  very  difficult  to  get  acceptable  as¬ 
sessments  from  foreign  countries. 

The  Committee  has  legitimate  and 
compelling  reasons  to 
seek  information  re¬ 
garding  the  status  of  its 
neighbors  and  trading 
partners.  Besides  the 
interdependent  nature  of 
the  U.S.  and  world 
economy  already  em¬ 
phasized  in  multiple 
sections  of  this  report,  the  U.S.  has  a 
responsibility  as  a  world  leader  to 
encourage  a  politically  and  economi¬ 
cally  stable  environment. 

Alerting  countries  to  potential  Y2K 
danger  by  encouraging  the  ex¬ 
change  of  information  is  one  way  the 
U.S.  fulfills  this  role. 

Furthermore,  the  nation  may  be 
called  upon  to  assist  its  neighbors  in 
cases  of  severe  Y2K  impact.  The 
U.S.  has  traditionally  been  one  of  the 
strongest  supporters  of  humanitarian 
aid  around  the  globe.  It  is  unlikely 
that  we  will  turn  our  back  on  the  in¬ 
ternational  community  in  the  after- 
math  of  Y2K.  Therefore,  the  Com¬ 
mittee  advocates  a  proactive  ap¬ 
proach  now  so  that  Y2K-related  re¬ 
percussions  are  reduced  later. 


OVERVIEW 


The  Committee  has  tapped  a  num¬ 
ber  of  sources  for  information  on  in¬ 
ternational  Y2K  preparedness. 
Within  the  government,  agencies 
such  as  the  State  Department,  De¬ 
partment  of  Commerce,  Department 
of  Defense,  U.S.  Information  Agency 
and  Central  Intelligence  Agency, 
have  access  to  inter¬ 
national  information 
via  their  respective 
overseas  operations. 
International  organi¬ 
zations,  such  as  the 
World  Bank,  United 
Nations  and  NATO, 
have  provided  vary¬ 
ing  degrees  of  insight.  Finally, 
some  private  sector  consultants 
have  released  reports  rating  the  pre¬ 
paredness  levels  of  certain  coun¬ 
tries. 

With  the  exception  of  private  sector 
consultants,  most  sources  have 
hesitated  to  divulge  specific  informa¬ 
tion  about  foreign  countries.  The 
reasons  for  this  are  numerous.  In 
many  cases,  the  least  prepared 
countries  are  those  that  depend 
heavily  on  foreign  investment  and 
multinational  companies  to  supple¬ 
ment  their  economies.  Panic  over 
Y2K  concerns  may  cause  investors 
to  withdraw  financial  support.  Lack 
of  confidence  in  a  country’s  infra¬ 
structure  could  cause  multinational 
companies  to  close  their  operations. 
The  results  could  topple  a  fragile 


THE  U.S.  HAS  A  RE¬ 
SPONSIBILITY  AS  A  WORLD 
LEADER  TO  ENCOURAGE  A 
POLITICALLY  AND 
ECONOMICALLY  STABLE 
ENVIRONMENT. 
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economy  or  a  struggling  foreign  gov¬ 
ernment. 


MAJOR  INITIATIVES 


The  State  Department  recognizes 
the  potential  difficulties  that  embas¬ 
sies  and  foreign  posts  may  face 
come  January  1,  2000.  As  a  result, 
the  State  Department  sent  a  survey 
to  260  posts  around  the  world,  the 
results  of  which  will  be  used  to  pin¬ 
point  troubled  areas.  The  Y2K  situa¬ 
tions  will  be  monitored  throughout 
the  duration  of  1999,  and,  in  cases  of 
severe  problems,  the  State  Depart¬ 
ment  will  issue  travel  warnings,  or 
encourage  American  nationals  living 
abroad  to  return  home.  The  State 
Department  has  already  issued  an 
edict  stating  that  all  embassies  must 
be  prepared  to  be  self-sufficient  for 
30  days  by  January  1,  2000.  More 
afflicted  areas  may  necessitate 
longer-term  plans. 

In  addition,  the  State  Department 
chairs  the  International  Relations 
Working  Group  of  the  President’s 
Y2K  Council.  This  working  group 
plans  to  engage  the  U.S.  embassies 
in  Y2K  assessments  of  their  host 
countries  and  summarize  results  in  a 
database  that  has  been  established 
by  the  U.S.  Information  Agency 
(USIA).  Other  federal  agencies  and 
the  private  sector  are  also  expected 
to  contribute  to  this  assessment  da¬ 
tabase,  but  the  State  Department  is 
still  working  out  a  process  for  gath¬ 
ering  and  synthesizing  all  of  this  in¬ 
formation. 


The  Department  of  Defense  has 
concerns  similar  to  those  of  the  State 
Department,  since  many  military 
personnel  are  stationed  abroad  and 
are  dependent  on  their  host  coun¬ 
tries’  infrastructures.  The  Depart¬ 
ment  of  Defense,  in  conjunction  with 
the  State  Department,  is  communi¬ 
cating  with  its  foreign  counterparts  to 
raise  awareness  and  generate  inter¬ 
national  forums  to  address  the  Y2K 
problem.  This  includes  such  possi¬ 
ble  actions  as  inviting  Russian  and 
Chinese  representatives  to  witness 
the  millennium  change  from  moni¬ 
toring  stations  within  the  U.S. 

The  State  Department  Office  of  the 
Inspector  General  (OIG)  is  also  en¬ 
gaged  in  Y2K  assessments  of  se¬ 
lected  countries.  Countries  covered 
to  date  include  the  following: 

Latin  America:  Mexico,  Chile  and 
Panama; 

Africa:  South  Africa,  Gabon,  Cam¬ 
eroon  and  Ethiopia; 

Southeast  Asia:  Thailand,  Hong 
Kong,  Singapore  and  the  Philippines. 

The  OIG  has  planned  the  following 
assessments  for  the  upcoming 
months: 

December:  Mumbai  and  New  Delhi, 
India; 

January:  Europe — Frankfurt,  Bonn, 
Berlin,  Rome,  Paris,  Athens,  London, 
Moscow,  Kiev  and  Warsaw;  and 

March:  To  be  confirmed  later,  but 
may  include  China,  Japan,  Korea 
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and  Vietnam,  as  well  as  Bolivia, 
Paraguay  and  Brazil. 


International  organizations  such  as 
the  World  Bank  and  the  United  Na¬ 
tions  have  also  engaged  in  Y2K  out¬ 
reach  programs.  From  June  through 
October,  the  World  Bank  conducted 
high-level  national  and  regional 
seminars  in  developing  countries. 
The  World  Bank  is  providing  plan¬ 
ning  and  implementation  grants,  as 
well  as  a  tool  kit  for  managing  the 
Y2K  problem.  Besides  issuing  a 
June  resolution  encouraging  interna¬ 
tional  Y2K  cooperation,  the  United 
Nations  hosted  a  program  in  New 
York  City  with  representatives  from 
close  to  100  countries  on  December 
11,  1998.  In  order  to  encourage 
participation,  as  well  as  induce 
countries  to  appoint  Y2K  project 
managers,  countries  too  poor  to 
send  a  Y2K  coordinator  could  re¬ 
ceive  World  Bank  funding  for  travel 
expenses. 

Private  sector  consultants  have  used 
a  range  of  data  to  speculate  on  the 
Y2K  status  of  countries.  Consult¬ 
ants  often  have  special  relationships 
with  corporate  clients,  including  ac¬ 
cess  to  proprietary  data  from  multiple 
industries  within  a  country.  As  a  re¬ 
sult,  they  can  create  models  based 
on  assumptions  supported  partially 
by  hard  numbers  and  partially  by  in¬ 
sider  experience,  and  make  fairly 
credible  estimates.  However,  most 
consultants  will  not  reveal  specific 
client  information,  making  model 
verification  difficult.  Additionally, 
even  the  most  well-thought-out  as¬ 
sumption  can  prove  incorrect.  In 


short,  the  Committee  has  interpreted 
forecasts  with  some  skepticism. 


ASSESSMENTS 


The  Committee  feels  comfortable 
commenting  on  the  preparedness  of 
countries  only  in  general  terms.  As  a 
result,  the  Committee  plans  to  focus 
its  attention  on  international  prepar¬ 
edness  in  the  upcoming  session. 

Top-Tier  Countries 

At  present,  Canada,  Australia,  and 
the  United  Kingdom  have  consis¬ 
tently  appeared  on  the  top  of  prepar¬ 
edness  lists. 

Canada:  In  1997,  Canada  estab¬ 
lished  a  government-industry  task 
force  to  address  Y2K  issues  across 
key  sectors  of  the  economy.  Can¬ 
ada  is  encouraging  compliance  by 
providing  small  business  tax  relief  for 
Y2K  repairs.  Additionally,  a  Sep¬ 
tember  Organization  for  Economic 
Co-operation  and  Development  re¬ 
port  stated  that: 

•  70%  of  businesses  are  taking  ac¬ 
tion, 

•  94%  of  medium  and  large  firms 
are  addressing  the  problem,  and 

•  Close  to  one-third  of  Canadian 
businesses  indicate  that  their 
systems  are  ready.  ; 

Australia:  Besides  an  internal  Year 
2000  Project  Office,  the  Australian 
government  established  the  Year 
2000  National  Strategy  with  $6  mil¬ 
lion  (U.S.$)  to  alert  private  sector 
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businesses  to  Y2K  danger.  Australia 
also  took  a  strong  position  on  Y2K 
disclosure  for  public  companies,  in¬ 
sisting  on  Y2K  disclosure  for  all  pub¬ 
lic  Australian  companies  by  June  30, 
1998.  As  of  July  1998,  the  following 
percentages  of  critical  systems  have 
been  repaired1: 

•  60%  of  underlying  delivery  of 
health  and  national  services, 

•  48%  of  social  welfare  and  em¬ 
ployment, 

•  33%  of  revenue  collection, 

•  40%  of  national  security  (not  in¬ 
cluding  defense)  and 

•  34%  of  business  critical  functions 
in  defense. 

The  United  Kingdom:  The  U.K.  has 
put  considerable  effort  into  convinc¬ 
ing  its  European  neighbors  that  the 
Y2K  problem  needs  attention.  In 
March  of  this  year,  Prime  Minister 
Tony  Blair  stated  that  the  U.K.  was 
dedicated  to  bringing  Y2K  to  the  top 
of  the  international  agenda.  Besides 
conducting  surveys  through  its  em¬ 
bassies,  the  U.K.  pledged  $16.7  mil¬ 
lion  (U.S.$)  to  the  World  Bank  to 
support  Y2K  efforts  in  developing 
countries. 

Even  among  the  most  Y2K  consci¬ 
entious  countries,  problems  exist. 
Canadian  Auditor  General  Denis  De- 
sautels  submitted  a  report  to  his 
government  on  December  1,  1998. 
The  report  acknowledged  improve¬ 
ment  since  a  1997  audit,  but  ex¬ 
pressed  concern  that  work  still 
lagged  in  areas.  As  of  June  1998, 


only  four  departments  and  agencies, 
responsible  for  7  of  the  48  mission- 
critical  functions,  had  made  “good” 
progress. 

In  Australia,  PriceWaterhouse  Coo¬ 
pers  reported  recently  that  while 
business  and  government  Y2K 
spending  had  increased  47%  in  the 
past  year,  average  expected  project 
completion  dates  slipped  from  De¬ 
cember  1998  to  May  1999. 

The  U.K.  also  faces  problems. 
Prime  Minister  Blair’s  attempt  to 
raise  an  army  of  30,000  “bugbusters” 
fell  short  by  29,900  bodies,  as  of  a 
mid-September  report.  The  low  turn¬ 
out  throws  doubt  on  the  U.K.’s  Action 
2000  project’s  ability  to  galvanize  the 
private  sector. 

This  information  on  Canada’s,  Aus¬ 
tralia’s  and  the  U.K.’s  Y2K  programs 
cannot  begin  to  represent  the  sub¬ 
stantial  efforts  that  these  and  other 
countries  have  made.  Unfortunately, 
even  countries  that  have  received 
the  best  rankings  still  carry  consider¬ 
able  Y2K  risks,  including  the  U.S. 

Europe  Overall 

Cap  Gemini,  a  consulting  group  with 
a  strong  business  relations  through¬ 
out  Europe  and  the  U.S.,  conducts 
regular  Y2K  assessments  of  Norway, 
Finland,  Denmark,  Italy,  Belgium, 
Sweden,  France,  the  Netherlands, 
the  U.K.,  Germany,  the  U.S.  and 
Spain.  Cap  Gemini  has  taken  the 
task  of  sizing  the  Y2K  problem,  using 
self-reported  estimates  of  anticipated 
costs  versus  dollars  spent.  To  com¬ 
pare  countries  of  vastly  different 
size,  Cap  Gemini  reports  data  as 
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percentages  of  annual  information 
technology  spending. 

Cap  Gemini’s  October  data  indicate 
that  the  U.S.  still  leads  in  remedia¬ 
tion  efforts  as  a  percentage  of  esti¬ 
mated  Y2K  budget  spent  (61%). 
While  the  Committee  is  pleased  to 


The  Committee  is  not  convinced  that 
American  companies  have  not  over¬ 
estimated  their  preparedness  as 
well.  According  to  Cap  Gemini,  5  out 
of  6  U.S.  organizations  express  con¬ 
fidence  in  their  business  critical  sys¬ 
tems.  Somewhat  disturbingly,  virtu- 


Norway  Finland  Denmark  Italy  Belgium  Sweden  France  Netherlands  UK  Germany  USA  Spain 


Country 

11  %  of  Total  Y2K  Budget  spent  to  date  BTotal  Y2K  Budget  as  %  of  1  Year’s  IT  spending  (Oct.  1 998) 


see  this  indication  of  progress,  we 
recognize  that  dollars  spent  do  not 
necessarily  equate  directly  to  com¬ 
pleted  work. 

For  example,  Cap  Gemini  has  ex¬ 
pressed  concern  that  some  Euro¬ 
pean  countries  have  underestimated 
Y2K,  and  therefore  have  completed 
a  smaller  percentage  of  the  neces¬ 
sary  Y2K  work  than  suggested  by 
Cap  Gemini’s  research. 


ally  all  European  countries  express 
confidence  in  their  systems.  Fortu¬ 
nately,  98  %  of  surveyed  American 
companies  are  creating  contingency 
plans,  versus  only  60%  of  European 
companies.  These  numbers  do  not, 
however,  include  companies  with 
fewer  than  100  employees. 

Further  bad  news  was  released  in 
December  1998  from  the  European 
Commission.  The  report  warned 
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member  countries  that  efforts  to 
bring  systems  in  line  with  Y2K  are 
not  sufficient.  The  Commission  also 
criticized  the  lack  of  information 
available  about  certain  sectors  and 
administrations,  with  the  exception  of 
the  U.K. 

Worldwide  Comparison 

Data  become  increasingly  specula¬ 
tive  outside  of  the  previously  dis¬ 
cussed  countries.  Forecasts  lever¬ 
age  such  techniques  as  estimating 
computing  personnel  within  a  given 


country,  projecting  a  country’s  vol¬ 
ume  of  Y2K  repairs  based  on  the 
make-up  of  a  given  country’s  econ¬ 
omy  and  estimating  preparedness 
levels  through  in-country  interviews, 
surveys  and  personal  contacts. 

It  is  a  sophisticated  and  time- 
consuming  process  that  results  in 
imprecise  data,  at  best.  However, 
the  Committee  feels  that  even  im¬ 
perfect  data  provide  more  benefit 
now  than  perfect  data  12  months 
from  today. 


■ 

Estimated  Y2K  Soft¬ 
ware  Repair  Cost 

Estimated  Y2K 
Total  Repair 
Cost 

(%  1996  GDP) 

Percent  of  Systems 
“Work  in  Progress” 

Robbins/Rubin  Y2K 
Schedule  Indicator 

$187,921,430,000 

2.5% 

0.83 

0.87 

$  6,191,702,000 

2.5% 

0.78 

The  UK 

$  42,931,317,000 

3.7% 

0.82 

0.85 

Canada 

$  18,129,243,000 

3.1% 

0.81 

0.85 

Japan 

$105,964,254,000 

2.3% 

0.78 

0.85 

France 

$  42,379,656,000 

2.8% 

0.78 

0.84 

Germany 

$  60,544,165,000 

0.79 

0.84 

$  7,232,049,000 

2.7% 

0.78 

0.84 

$  4,037,957,000 

1.2% 

0.75 

0.84 

12!^ urns 

$  32,246,348,750 

7.3% 

0.58  • 

0.83 

mnmmm 

$  10,199,431,000 

2.6% 

0.77 

0.83 

$  9,894,632,000 

2.5% 

0.73 

0.81 

Italy 

$  33,731,929,000 

2.8% 

0.77 

0.79 

Portugal 

4.9% 

0.69 

0.79 

Argentina 

$  8,292,548,000 

2.8% 

0.58 

0.79 

China 

$  4,442,256,500 

0.5% 

0.55 

0.78 

Korea 

$  22,614,322,500 

4.7% 

0.68 

0.78 

Brazil 

$  35,832,775,000 

4.8% 

0.61 

0.78 

$  17,328,201,000 

3.0% 

0.72 

0.77 

$  19,250,198,000 

5.7% 

0.62 

0.76 

$  33,703,193,508 

3.3% 

0.72 

0.82 

Q3QSH1 

$674,063,870,150 

Using  such  techniques,  Dr.  Howard 
Rubin,  Chair  of  the  Computer  Sci¬ 
ence  Department  at  Hunter  College 
and  Research  Fellow  for  the  Meta 


Group,  has  put  together  a  table  that 
provides  an  indicator  of  Y2K  prog¬ 
ress.  The  Robbins/Rubin  Y2K 
Schedule  Indicator  quantifies  the 
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current  level  of  progress  versus  the 
projected  state  of  progress.  A  score 
of  1.00  indicates  that  a  country’s 
Y2K  progress  is  on  schedule.  A 
value  over  1.00  indicates  that  a 
country  is  ahead  of  schedule  and  a 
value  of  less  than  1.00  indicates  that 
a  country  is  behind  schedule.  By  Dr. 
Rubin’s  calculations,  no  country  is 
ahead  of  or  on  schedule.  The  U.S. 
score,  0.87,  still  indicates  that  the 
U.S.  is  13%  behind  schedule.  On 
average,  the  countries  included  in 
this  study  scored  0.82,  indicating  that 
they  have  made  82%  of  their  pro¬ 
jected  progress  in  addressing  the 
problem.  According  to  Dr.  Rubin, 
0.75  is  an  important  cutoff  score — 
after  a  project  falls  25%  or  more 
behind  schedule,  it  becomes  virtually 
impossible  to  bring  it  back  on 
schedule. 

The  Robbins/Rubin  Indicator  sup¬ 
ports  the  Committee’s  sense  that  the 
U.S.,  the  U.K.,  and  Canada  are  in 
relatively  good  shape  to  face  the 
millennium.  Results  from  other 
countries  are  more  surprising,  espe¬ 
cially  when  compared  to  the  results 
of  the  Gartner  Group  is  research. 

The  Gartner  Group  leverages  its 
worldwide  business  network  to  col¬ 
lect  information  from  87  countries 
and  15,000  companies.  In  the  Gart¬ 
ner  Group’s  third  quarter  estimates, 
countries  that  ranked  in  the  top  of 
Gartner’s  four  tiers  will  see  at  least 
one  mission-critical  failure  in  15%  of 
all  companies  and  government 
agencies.  Third-  and  fourth-tier 
countries  are  predicted  to  see  over 
50%  of  their  systems  experience 
some  level  of  interruption. 

Comparing  Results 

Senate  Special  Committee  on  the  Year 


Japan:  While  scoring  a  respectable 
0.85  on  the  Robbins/Rubin  Indicator, 
Japan  has  placed  far  lower  on  other 
rankings,  such  as  the  Gartner  Group 
rankings. 

Despite  significant  improvement  in 
the  past  year,  Japan  may  have  un¬ 
derestimated  the  scope  of  the  Y2K 
problem.  According  to  a  Bank  of  Ja¬ 
pan  survey,  the  majority  of  Japanese 
banks  have  neither  engaged  in  con¬ 
tingency  planning,  nor  checked  the 
Y2K  exposure  of  customers  and 
counterparties.  Since  banking  has 
proved  to  be  one  of  the  most  ag¬ 
gressive  sectors  in  addressing  the 
Y2K  problem  around  the  globe,  un¬ 
derestimation  on  the  part  of  the 
Japanese  banking  sector  may  indi¬ 
cate  even  less  awareness  in  other 
sectors. 

France  and  Germany:  France  and 
Germany  share  a  relatively  high  0.84 
Robbins/Rubin  rating,  and  both  re¬ 
ceived  praise  in  the  Cap  Gemini  re¬ 
port  for  significant  improvement  over 
the  past  6  months. 

However,  qualitative  reports  suggest 
that  France  and  Germany  have  yet 
to  espouse  a  risk  management  ap¬ 
proach  to  Y2K.  The  Committee  feels 
strongly  that  Y2K  is  not  just  a  tech¬ 
nology  problem,  and  worries  that 
countries  that  simply  focus  on  fixing 
the  problem  will  fail  to  assess  Y2K  in 
a  broad  enough  scope,  and  may  fail 
to  engage  in  contingency  planning. 

France  and  Germany  may  also  suf¬ 
fer  from  a  preoccupation  with  the 
conversion  to  the  euro.  In  spring 
1998,  a  survey  by  Neaman 
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Bond,  a  consulting  group,  reported  France  and  Germany  may  have  led 

that  both  French  and  German  com-  the  way  in  euro  conversion  at  the 

panies  ranked  the  euro  conversion  expense  of  Y2K  remediation, 
as  more  important  than  Y2K  prepa¬ 
rations.  As  two  of  the  most  ardent 
supporters  of  a  unified  currency, 

Gartner  Group  Predictions  of  Failure  for  Countries 


0/  Australia,  Belgium,  Bermuda,  Canada,  Denmark,  the  Netherlands, 
1b/o  Ireland,  Israel,  Switzerland,  Sweden,  the  U.K.,  and  the  U.S.A. 


Brazil,  Chile,  Finland,  France,  Hungary,  Italy,  Mexico,  New  Zealand, 
33  /o  Norway,  Peru,  Portugal,  Singapore,  South  Korea,  Spain,  and  Taiwan 


Argentina,  Armenia,  Austria,  Bulgaria,  Columbia,  Czech  Republic, 
Egypt,  Germany,  Guatemala,  India,  Japan,  Jordan,  Kenya,  Kuwait, 
50%  Malaysia,  North  Korea,  Poland,  Puerto  Rico,  Saudi  Arabia, 

South  Africa,  Sri  Lanka,  Turkey,  U.A.E.,  Venezuela,  Yugoslavia 


Afghanistan,  Bahrain,  Bangladesh,  Cambodia,  Chad,  China,  Costa  Rica, 
Ecuador,  El  Salvador,  Ethiopia,  Fiji,  Indonesia,  Laos, 

66%  Lithuania,  Morocco,  Mozambique,  Nepal,  Nigeria,  Pakistan, 

Philippines,  Romania,  Russia,  Somalia,  Sudan,  Thailand, 

Uruguay,  Vietnam,  Zaire,  and  Zimbabwe 


Note:  Countries  listed  in  alphabetical  order 


Spain:  Spain  is  behind  in  its  Y2K 
remediation  as  indicated  by  all  three 
research  reports.  Worth  noting, 
however,  is  the  pattern  Spain’s  Y2K 
efforts  seem  to  be  taking. 

Between  April  and  October  1998,  the 
percentage  of  Spain’s  estimated  Y2K 
budget  jumped  from  22%  to  99%, 
indicating  a  dramatic  increase  in 
awareness  among  surveyed  institu¬ 
tions.  Cap  Gemini  explained  this 
tremendous  change  in  terms  of  hu¬ 
man  nature.  Companies  are  inclined 
to  panic  and  overestimate  expendi¬ 
tures  when  first  faced  with  the  scope 


of  the  Y2K  problem.  As  Y2K  proj¬ 
ects  organize  themselves,  estimates 
tend  to  fall  as  managers  realize  that 
a  focused  approach  can  save  time 
and  money. 

This  phenomenon  highlights  the  im¬ 
portance  of  managerial  guidance. 
While  a  technology  department  can 
fix  a  Y2K  problem,  it  usually  cannot 
make  decisions  about  work  prioriti¬ 
zation,  end-to-end  testing  and  con¬ 
tingency  planning  without  support 
from  high-level  management. 
Spain’s  massive  jump  in  antici- 
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pated  spending  suggests  that  Span¬ 
ish  managers  may  have  just  discov¬ 
ered  the  Y2K  problem  and  have  yet 
to  consider  time-  and  resource¬ 
saving  options,  such  as  triage  and 
contingency  planning. 


CONCERNS 


According  to  Gartner,  the  majority  of 
disruptions  will  be  minimal.  Only 
1 0%  of  failures  are  expected  to  last 
more  than  3  days.  The  question 
then  becomes,  which  areas  will  face 
disruptions  longer  than  3  days  and 
how  severe  will  the  impact  of  these 
failures  be?  This  is  the  overall  ques¬ 
tion  that  the  Committee  hopes  to  ad¬ 
dress  in  the  following  months. 

Specifically  relating  to  the  interna¬ 
tional  sector,  the  Committee  has  a 
special  concern  for  the  status  of  criti¬ 
cal  U.S.  trading  partners.  The  top 
trading  partner  of  the  U.S.,  Canada, 
accounts  for  20.5%  of  the  U.S.  world 
trade  (imports  and  exports).  Japan 
accounts  for  12%  and  Mexico 


1  OECD  Report,  The  Year  2000  Problem:  Im- 
pacts  and  Actions. 


10.1%.  While  Canada  falls  in  Gart¬ 
ner’s  top  tier,  Japan  and  Mexico  are 
in  the  second  and  third  tier,  respec¬ 
tively. 

The  Committee  would  also  like  to 
investigate  the  availability  of  critical 
imports,  such  as  oil,  in  the  light  of 
potential  Y2K  disruptions.  For  ex¬ 
ample,  the  largest  supplier  of  im¬ 
ported  oil  to  the  U.S.  is  Venezuela, 
which  Gartner  reports  as  9  to  15 
months  behind  the  U.S.  in  its  Y2K 
preparation.  The  Committee  plans 
to  seek  more  information  on  critical 
imports  and  trading  partners. 

As  information  on  the  impact  of  Y2K 
on  the  international  front  becomes 
more  substantial,  the  Committee 
may  consider  the  need  to  recom¬ 
mend  certain  governmental  actions, 
such  as  targeted  outreach  programs, 
or  post-Y2K  recovery  efforts.  How¬ 
ever,  the  Committee  cannot  know 
the  direction  that  its  involvement  will 
take  until  it  examines  the  interna¬ 
tional  sector  more  closely. 
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LEGISLATIVE  ACTIVITIES 


S.  22,  Commission  on  the  Year 
2000  Computer  Problem  Act 

Introduced  September  1996 

This  bill  was  the  first  legislative 
attempt  to  address  the  Y2K  problem. 
It  called  for  the  establishment  of  a 
commission  to  study  the  Y2K 
problem  and  report  the  results  to  the 
President.  The  study  would  propose 
procedures  for  addressing  federal, 
state  and  local  government  computer 
systems,  as  well  as  recommend 
levels  of  appropriation  for 
remediation  efforts . 


S.  1518,  The  Year  2000  Computer 
Remediation  and  Shareholder 
(CRASH)  Protection  Act  of  1997 

Introduced  on  November  10,  1997 


The  bill  sought  to  require  publicly 
traded  companies  to  disclose  five 
categories  of  information  related  to 
their  Y2K  remediation  and  risk 
management  status  without  regard 
to  materiality.  The  introduction  of 
this  legislation  prompted  the 
Securities  and  Exchange 
Commission  to  publish  Staff  Legal 
Bulletin  No.  5  (January  12,  1998),  a 
reminder  to  public  operating 
companies,  investment  advisers  and 
investment  companies  to  consider 
their  disclosure  obligations  relating  to 
anticipated  costs,  problems  and 
uncertainties  associated  with  the 
Y2K  issue.  The  staff  legal  bulletin 
was  later  superceded  by  Interpretive 
Release  No.  33-7558,  an 


enforceable,  Commission-level 
release  published  on  August  4, 
1998. 

S.  1671,  The  Examination  Parity 
and  Year  2000  Readiness  for 
Financial  Institutions  Act 

Introduced  on  February  24, 1998 


The  legislation  gave  the  Office  of 
Thrift  Supervision  and  the  National 
Credit  Union  Administration  (NCUA) 
explicit  authority  to  examine  and 
service  corporations  and  subsidiaries 
owned  by  the  insured  institutions  to 
the  same  extent  that  other  financial 
institution  regulatory  agencies  were 
permitted  to  do  so.  The  legislation 
also  required  NCUA  to  take  certain 
actions  to  enhance  remediation 
efforts  within  the  credit  union  sector. 
The  Committee  staff  has  already 
seen  the  positive  results  of  this 
legislation,  as  regulators’  judiciously 
use  the  threat  of  cease  and  desist 
orders  to  keep  financial  institutions 
from  doing  business  with  unsound 
software  contractors. 

S.  2000,  A  bill  to  ensure  that 
businesses,  financial  markets  and 
the  Federal  Government  are 
taking  adequate  steps  to  resolve 
the  Year  2000  computer  problem 
Introduced  on  April  29,  1998 

In  introducing  this  legislation, 
Chairman  Bennett  sought  to  amend 
the  Employee  Retirement  Income 
Security  Act  of  1974  (ERISA)  to 
require  fiduciaries  of  employee 
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benefit  plans  to  consider  the  Y2K 
computer  problem  in  making 
investment  decisions.  The 

legislation  also  would  have  codified 
the  creation  of  the  President's 
Council  on  Y2K  Conversion.  The 
Chairman  felt  that  it  was  critical  for 
the  administration  to  dedicate  more 
than  a  task  force  to  this  complex  job. 
He  wants  the  council  to  be  vested 
with  actual  power,  authority,  and 
accountability. 

S.2392,  Year  2000  Information 
Readiness  and  Disclosure  Act 

Introduced  July  30, 1998 

Chairman  Bennett  intended  to 
encourage  the  disclosure  and 
exchange  of  information  about  the 


Y2K  computer  problem  by  limiting 
the  liability  of  companies  that 
provide  good  faith  Y2K  disclosure. 
S.2392  passed  the  Senate 
(amended)  on  September  28,  1 998 
and  was  signed  into  law  October  1 9, 
1998  (P.L.  105271). 

Specifically,  in  all  civil  litigation 
including  certain  antitrust  actions,  the 
act  limits  the  extent  to  which  Y2K 
statements  can  be  the  basis  for 
liability.  It  also  prevents  certain 
evidentiary  uses,  against  the  maker, 
of  a  subset  of  such  statements. 
However,  the  act  ensures  that  only 
responsible,  good  faith  information¬ 
sharing  receives  such  protection. 


\ 
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COMMITTEE  PRIORITIES  FOR  1999 


For  the  remainder  of  1999,  the 
Committee  will  continue  to  focus 
primarily  on  the  seven  industries  a  d- 
dressed  by  this  report.  A  renewed 
focus  will  be  brought  to  bear  on  the 
crosscutting  effects  of  increased  lit  i- 
gation  and  the  overall  health  of  the 
world  economy. 

The  Y2K  problem  is  a  dynamic  one, 
and  predicting  with  any  certainty 
which  new  issues  may  arise  is  i  im¬ 
possible.  Nevertheless,  there  are 
certain  areas  that  will  be  a  high  pr  i- 
ority  for  the  Committee  in  1999. 
These  areas  include: 

•  Revisiting  the  domestic  industry 
and  infrastructure  sectors  first 
examined  in  1998; 

•  Placing  increased  emphasis  on 
international  Y2K  preparedness; 

•  Monitoring  federal  government 
preparedness,  but  turning  more 
attention  to  state  and  local  gov¬ 
ernment  preparedness; 

•  Evaluating  contingency  and 
emergency  preparedness  pla  n- 
ning; 

•  Determining  the  need  for  add  i- 
tional  Y2K  legislation,  or  delaying 
implementation  dates  of  new 
regulations; 

•  Examining  litigation  issues  su  r- 
rounding  the  Y2K  problem;  a  nd 


•  Identifying  national  and  intern  a- 
tional  security  issues  and  co  n- 
cerns. 


SECTOR-BASED  ISSUES 


In  1998,  the  Committee  focused  pr  i- 
marily  on  domestic  Y2K  issues.  The 
Committee  investigated  critical  infr  a- 
structure  and  industry  sectors — util  i- 
ties,  healthcare,  telecommunications, 
transportation,  financial  institutions, 
government  and  business — in  an 
attempt  to  assess  the  Y2K  status  of 
each.  Broad-based  assessments 
were  practically  non-existent,  making 
fact-based  conclusions  impossible. 
In  that  regard,  Chairman  Bennett’s 
words  seem  even  more  appropriate: 
“We  are  flying  blind  into  the  Year 


Additional  information  requested  by 
the  Committee  on  the  status  of  var  i- 
ous  national  and  international  indu  s- 
tries  is  expected  to  be  available  in 
early  1999.  The  Committee  will, 
therefore,  continue  its  investigations 
and  conduct  hearings  in  each  of 
these  sectors  throughout  the  first  half 
of  1999. 

Rather  than  a  mere  continuation  of 
the  broad-based  hearings  conducted 
in  1998,  future  hearings  will  be 
smaller  and  will  focus  on  specific 
problem  areas  or  industries  in  a 
given  sector. 
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INTERNATIONAL  ISSUES 


Even  if  the  U.S.  could  remediate  all 
of  its  systems  and  embedded  pro  c- 
essors  in  time  (which  it  cannot),  it 
would,  in  an  economic  sense,  still  be 
at  the  mercy  of  the  rest  of  the  world. 

The  U.S.  is  part  of,  and  dependent 
on,  the  global  economy.  Like  the 
suppliers  and  partners  within  any 
given  industry  supply  chain,  Arne  r- 
ica’s  vulnerability  to  the  Y2K  problem 
extends  to  other  countries.  The 
Committee’s  research  into  each  i  n- 
frastructure  and  industry  sector  hig  h- 
lights  U.S.  dependence  on  other 
countries,  from  Venezuela  for  oil  to 
Denmark  for  i  nsulin. 

The  Committee  will  turn  its  attention 
to  countries  economically  and  polit  i- 
cally  important  to  the  United  States. 
It  will  examine  various  sources  of 
information  to  determine  the  state  of 
readiness  of  these  countries  and  if 
warranted,  will  recommend  actions 
to  assist  in  their  remediation  efforts 
or  to  reduce  the  risks  unprepared 
countries  pose  to  the  United  States. 


GOVERNMENT 

PREPAREDNESS 


The  federal  government  openly 
shares  information  on  its  own  Y2K 
preparedness.  While  not  all  of  the 
findings  are  good,  at  least  the  info  r- 
mation  is  available.  Less  visible  is 
the  status  of  preparedness  of  state 
and  local  governments.  Their  status 
of  readiness  will  directly  affect  most 
Americans,  because  this  is  where 
they  will  turn  if  there  is  a  failure  in 
basic  services,  such  as  util  ities. 


The  Committee  is  concerned  that 
many  state  and  local  governments 
are  not  doing  enough,  either  be¬ 
cause  they  are  unaware  of  their  vu  I- 
nerabilities  or  because  they  have  i  n- 
sufficient  resources.  The  Committee 
will  continue  to  examine  these  issues 
in  greater  detail  in  1999,  and  work 
with  individual  House  and  Senate 
members  to  take  corrective  actions 
where  needed. 


CONTINGENCY  PLANNING 


The  Committee  will  continue  to 
monitor  the  Y2K  status  of  critical  i  n- 
dustry  and  infrastructure  sectors,  but 
will  turn  its  attention  to  contingency 
and  emergency  preparedness  pla  n- 
ning  in  the  last  half  of  1999. 

The  Committee  will  conduct  hearings 
and  make  recommendations  based 
on  the  results  of  its  industry  and  i  n- 
frastructure  assessments  conducted 
in  the  first  half  of  the  year.  The 
Committee’s  goal  will  be  to  ensure 
the  availability  of  basic  emergency 
services  and  active  contingency 
plans  in  the  event  of  Y2K  disru  p- 
tions. 


LEGISLATION 


The  Committee  will  continue  to  e  x- 
amine  the  need  for  legislation  or 
modifications  to  existing  statutes  and 
regulations.  The  intent  of  such  le  g- 
islation  must  be  to  provide  incentive 
for  greater  remediation  efforts,  to  e  n- 
sure  scarce  resources  are  devoted 
to  remediation,  and  to  encourage 
both  greater  sharing  of  information 
and  a  fair  approach  to  the  litigation 
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that  might  arise  from  Y2K  pro  blems. 


LITIGATION 


The  Committee  will  continue  to 
monitor  and  hold  hearings  on  Y2K 
litigation  issues.  It  will  support  ef¬ 
forts  to  minimize  the  impact  of  Y2K 
litigation  dn  the  court  system  while 
continuing  to  hold  individuals  and 
companies  responsible  for  their  a  c¬ 
tions. 


NATIONAL  SECURITY 


The  Y2K  computer  problem  could 
pose  a  risk  to  our  national  security  if 
not  properly  addressed.  Broad  i  s- 


sues  such  as  the  status  of  nuclear, 
chemical,  and  biological  weapons 
and  our  ability  to  protect  U.S.  per¬ 
sonnel  and  interests  here  and 
abroad  are  of  utmost  concern  to  all 
Americans. 

The  Department  of  Defense  has 
monumental  Y2K  problems,  and  it  is 
severely  behind  in  addressing  them. 
It  is  at  risk  of  not  completing  rem  e- 
diation  of  all  of  its  mission-critical 
systems  in  time.  In  addition,  its  i  n- 
frastructure  of  more  than  550  bases 
around  the  world  may  not  be  ready. 
For  these  reasons,  the  Committee 
intends  to  foster  continuous  and 
considerable  attention  on  national 
security  issues  during  1999. 
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RECENT  EVENTS 


Several  key  events  have  occurred 
since  the  close  of  the  105  th  Con¬ 
gress.  The  following  is  a  partial  list. 


PRESIDENT’S  YEAR  2000 
COUNCIL 

•  On  January  7,  1999,  the  Presi¬ 
dent’s  Council  on  Year  2000 
Conversion  released  its  first 
quarterly  summary  of  asses  s- 
ment  information  from  its 
numerous  industry-sector  wor  k- 
ing  groups.  This  report  almost 
exclusively  described  the  coord  i- 
nation  processes  at  work  in  the 
various  sectors  and  revealed  little 
quantitative  information  on  Y2K 
readiness. 

UTILITIES 

•  On  January  11,  1999,  the  North 
American  Electric  Reliability 
Council  (NERC)  issued  its  sec¬ 
ond  quarterly  report  (fourth 
quarter  1998)  to  the  Department 
of  Energy.  It  boasted  a  98%  pa  r- 
ticipation  rate  in  its  survey  and 
reported  steady  progress  in  Y2K 
remediation.  However,  56%  of 
the  nation’s  3,200  electric  utilities 
have  yet  to  complete  the  most 
difficult  phase  of  remediation  and 
testing  with  less  than  5  months  to 
go  to  NERC’s  self-imposed  dea  d- 
line  of  June  30,  1999.  The  report 
indicates  that  several  utilities  will 


not  make  this  deadline,  including 
one-third  of  the  nuclear  power- 
generation  facilities. 

HEALTHCARE 

•  The  stockpiling  of  medications  to 
insure  that  26.5  million  chron  i- 
cally  ill  citizens  are  protected 
during  the  Y2K  period  remains  an 
open  issue.  The  Special  Co  m- 
mittee’s  Vice  Chairman,  Senator 
Christopher  Dodd,  has  requested 
that  the  President’s  Council  on 
the  Year  2000  develop  a  policy 
and  procedural  solution  by  May 
1,  1999. 

TELECOMMUNICATIONS 

•  On  January  14,  1999  the  Network 
Reliability  and  Interoperability 
Council  presented  its  initial  fin  d- 
ings  on  the  remediation  efforts  of 
the  telecommunications  industry 
which  revealed  that  the  industry 
plans  to  be  Y2K  ready  by  June 
1999. 

•  The  Teleco  Forum  completed  its 
network  testing  and  plans  to  r  e- 
lease  its  report  in  February  1999. 
The  Forum  found  no  major 
interoperability  problems  in  the 
network  configurations  tested. 
This  testing  focused  heavily  on 
the  networks  providing  local 
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phone  service. 

•  The  Alliance  for  Telecommunic  a- 
tions  Industry  Solutions  (ATIS) 
began  testing  for  inter-network 
interoperability  with  results  ex¬ 
pected  by  the  end  of  the  first 
quarter  of  1999.  This  testing  will 
focus  primarily  on  long  distance 
phone  service.  ATIS  will  also  be 
testing  the  Government’s  Erne  r- 
gency  Phone  System. 

•  In  January  1999,  the  Joint  Tele¬ 
communications  Resources 
Board  (JTRB),  which  advises  the 
President  on  emergency  tel  e- 
communications  allocations,  met 
to  discuss  what  role  it  would  play 
in  a  Y2K  emergency.  This  was 
the  first  meeting  of  the  JTRB 
during  the  Clinton  admin  istration. 


TRANSPORTATION 


•  The  December  1998  U.N.  meet¬ 
ing  of  Y2K  leaders  from  over  100 
countries  identified  ports  and 
maritime  shipping  operations 
around  the  world  as  an  area  of 
great  concern.  There  is  very  little 
known  about  the  Y2K  readiness 
of  this  sector,  which  greatly  i  n- 
fluences  the  global  economy.  In 
the  U.S.,  over  95%  of  imports 
and  exports  go  through  U.S. 
ports.  To  raise  the  visibility  of  the 
seriousness  of  this  issue  worl  d- 
wide,  the  International  Maritime 
Organization,  a  U.N.  affiliate,  will 
host  a  major  conference  and 
workshop  on  this  topic  in  London 
during  March  1999. 


•  The  American  Public  Transport 
Association,  the  major  trade  a  s- 
sociation  of  American  mass 
transit  organizations,  convened  a 
Y2K  workshop  in  Houston  in 
January  1999.  Over  100  org  ani- 
zations  were  represented. 
However,  this  was  a  small  pe  r- 
cent  of  the  over  6,000  mass 
transit  organizations  in  the  U.S. 
Frank  presentations  at  this 
meeting  revealed  that  major  me  t- 
ropolitan  transit  operations  were 
not  going  to  be  completely  ready 
for  January  1,  2000.  Contin¬ 
gency  Planning  and  Continuity  of 
Business  Plans  are  a  must  for 
many  entities  in  this  sector  if 
major  disruptions  in  public  transit 
systems  are  to  be  avoided  in  the 
early  part  of  2000. 


FINANCIAL  SERVICES 


•  The  results  of  third  quarter  SEC 
filings  of  public  companies  were 
mixed.  While  a  far  larger  pe  r- 
centage  of  public  companies 
addressed  Y2K  in  their  filings, 
many  disclosures  revealed  little  in 
the  way  of  significant  i  nformation. 


GENERAL  GOVERNMENT 


•  The  United  States  Fire  Admin  i- 
stration  is  currently  conducting  a 
survey  of  4300  Public  Safety  A  n- 
swering  Points  to  assess  the 
readiness  of  91 1  Systems  nation 
wide.  Less  than  ten  percent  of 
those  surveyed  have  responded 
to  date,  and  no  firm  concl  u- 
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sions  can  be  reached  about  the 
data  at  this  point. 

•  FEMA  has  commenced  the  first 
of  a  series  of  ten  regional  Y2K 
Preparation  and  Consequence 
Management  Workshops.  These 
workshops  are  intended  to  pro¬ 
vide  a  forum  where  emergency 
management  and  fire  services 
communities  can  discuss  initial 
Y2K  compliance  assessments, 
potential  consequences  of  Y2K 
disruptions,  and  coordination  of 
local,  state  and  federal  re¬ 
sponses.  These  workshops  are 
in  preparation  for  the  national- 
level  Y2K  consequence  ma  n- 
agement  exercise  scheduled  in 
Washington,  DC  in  June  1999. 

•  FEMA  made  significant  strides  in 
preparing  the  nation’s  emergency 
services  by  initiating  the  process 
to  amend  the  national  Federal 
Response  Plan  to  account  for 
potential  Y2K  disruptions  and 
events.  This  plan  coordinates  the 
Federal  government’s  response 
to  major  emergencies  and  dis¬ 
asters.  FEMA  also  initiated  a 
series  of  regional  contingency 
planning  meetings  in  February  to 
coordinate  Federal  and  local  Y2K 
preparations. 


GENERAL  BUSINESS 


•  In  December  1998,  the  Food 
Supply  Working  Group,  chaired 
by  the  US  Department  of  Agri¬ 
culture,  of  the  President’s  Council 
on  Y2K  Conversion  released  an 


initial  assessment  of  Y2K  and  the 
food  supply.  The  assessment 
covered  three  areas:  domestic 
food  supply;  imports  and  exports; 
and  transportation.  The  report 
said,  “the  state  of  readiness 
within  the  food  industry  is  en¬ 
couraging.  An  interruption  in  the 
food  supply  so  severe  as  to 
threaten  the  well-being  and  basic 
comfort  of  the  American  public  is 
unlikely.”  The  assessment  is 
based  on  a  December  11,  1998, 
report  by  the  Gartner  Group  on 
behalf  of  USDA. 

•  The  National  Federation  of  Ind  e- 
pendent  Businesses,  released 
the  report,  “Small  Business  and 
the  Y2K  Problem,  Part  II,”  on 
January  5,  1999.  It  concludes 
that  for  most  small  business 
owners  Y2K  is  not  a  priority.  For 
those  that  have  taken  action  to 
address  Y2K,  the  cost  has  been 
minimal. 

•  On  December  16,  1998,  Food 
Distributors  International  (FDI) 
completed  their  second  survey 
intended  to  measure  their  me  m- 
bers’  Y2K  readiness.  Both 
surveys  indicated  that  all  respo  n- 
dents  had  a  Y2K  compliance 
program.  However,  the  second 
survey  highlighted  two  areas  of 
concern:  late  Y2K  program  target 
completion  dates  and  the  lack  of 
plans  to  perform  business  cont  i- 
nuity  or  contingency  planning. 
FDI  plans  to  repeat  this  survey  at 
six-week  intervals. 
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•  On  February  5,  1 999,  the  Senate 
Special  Committee  on  the  Year 
2000  Technology  Problem  held 
its  first  hearing  of  the  106  th  Con¬ 
gress.  This  was  the  first  of  two 
hearings  focusing  on  the  Y2K 
preparedness  of  the  food  supply 
-  from  ‘farm-to-fork’.  Senator 
Richard  Lugar,  Chairman  of  the 
Senate  Agriculture,  Nutrition,  and 
Forestry  Committee;  The  Honer- 
able  Daniel  Glickman,  Secretary 
of  the  Department  of  Agriculture; 
Tyrone  Thayer,  Corporate  VP  & 
President  of  Cargill  Foods;  Allen 
Dickason,  CIO  of  Suiza  Foods 
Corp;  and  Ken  Evans,  President 
of  the  Arizona  Farm  Bureau  pr  o- 
vided  expert  testimony  at  the 
hearing.  Testimony  indicated 
significant  progress  has  been 
made  since  October  1998  within 
the  United  States  food  supply 
chain.  However,  it  also  showed 
that  there  is  much  remaining  to 
be  done  in  the  remaining  months 
of  1999.  The  second  hearing  is 
scheduled  for  March  2,  1999  and 
will  include  witnesses  from 
SUPERVALU,  Kroger,  Kraft, 
Nestle,  the  Food  Marketing  Inst  i- 
tute,  and  Grocery  Manufacturers 
of  America. 

•  On  February  17,  1999,  FDI  re¬ 
leased  the  results  of  their  third 
Y2K  member  survey.  As  with  the 
previous  two  surveys,  both  late 
Y2K  program  target  completion 
dates  and  the  lack  of  plans  to 
perform  business  continuity  or 
contingency  planning  are  a  co  n- 
cern.  However,  the  responses 


did  indicate  increased  confidence 
in  respondent’s  ability  to  meet 
their  own  internal  Y2K  goals. 


INTERNATIONAL 


•  On  December  11,  1998,  the 
United  Nations  sponsored  a 
daylong  international  Y2K  event. 
Over  120  member  nations  sent 
representatives.  For  many  n  a- 
tions,  this  represented  an 
opportunity  for  coordination  with 
their  neighbors  and  trading  par  t- 
ners.  Unfortunately,  for  others,  it 
marked  the  beginning  of  their 
countries’  Y2K  remediation  ef¬ 
forts. 

•  On  January  26,  1999,  the  World 
Bank  released  the  results  of  its 
survey  of  1 39  developing  cou  n- 
tries.  Only  54  countries  had 
initiated  national  Y2K  programs, 
and  just  21  were  taking  concrete 
steps  to  remediate  their  compu  t- 
ing  systems.  The  World  Bank 
concluded  that  developing  cou  n- 
tries  face  serious  hurdles  in 
addressing  their  Y2K  problems, 
including  lack  of  awareness, 
funding,  and  available  IT  profe  s- 
sionals. 

•  A  survey  by  Taiwan’s  Y2K  office 
indicated  that  40%  of  one  million 
small-  and  medium-sized  bus  i- 
nesses  have  taken  no  action  to 
remediate  their  computer  sy  s- 
tems. 
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PENDING  LEGISLATION 


•  S.  96  -  The  Y2K  Act  (Introduced 
January  19, 1999) 

The  bill  intends  to  regulate  inte  r- 
state  commerce  by  providing  for 
the  orderly  resolution  of  disputes 
arising  out  of  Y2K-based  pro  b- 
lems.  Among  other  things,  the 
bill  provides  that  a  Y2K  action 
may  not  proceed  to  trial  unless 
the  defendant  has  been  given  the 
opportunity  to  fix  the  problem; 
imposes  a  cap  on  punitive  da  im¬ 
ages;  and  sets  forth  liability  rules 
that  apply  to  product  sellers, 
renters,  and  lessors. 

•  S.  1 74  -  The  Y2K  State  and  Local 
Government  Assistance  Pr  o- 
grams  (GAP)  Act  of  1999 
(Introduced  January  19,  1999) 

The  bill  provides  funding  for 
states,  through  grants,  to  help 
states  and  local  governments 
make  programs  they  administer 
Y2K  compliant.  Grant  applica¬ 
tions  must  describe  a  proposed 
plan  for  the  development  and  i  im¬ 
plementation  of  an  applicable 
Y2K  compliance  program,  along 
with  a  proposed  budget,  a  re¬ 
quest  for  a  specific  funding 
amount,  and  an  identification  of  a 
funding  source  for  completion  of 
the  plan  if  applicable. 

•  S.  314  -  The  Small  Business 
Year  2000  Readiness  Act  (Intr  o- 
duced  January  27,  1999) 


The  bill  establishes  a  program 
under  which  the  government, 
through  the  Small  Business  Ad¬ 
ministration,  will  guarantee  loans 
made  to  small  businesses  to 
remediate  their  Y2K  problems 
and  to  provide  relief  for  a  su  b- 
stantial  economic  injury  incurred 
by  the  small  business  as  a  direct 
result  of  Y2K  problems. 

•  H.R.  179  The  Businesses  Unde  r- 
going  the  Glitch  (BUG)  Act 
(Introduced  January  6, 1999) 

The  bill  provides  a  tax  deduction 
from  gross  income  for  the  Year 
2000  computer  conversion  costs 
of  small  businesses.  The  aggr  e- 
gate  amount  allowed  as  a 
deduction  is  limited  to  $40,000. 

•  H.R.  192  -  The  Year  2000  Co  n- 
sumer  Protection  Plan  Act  of 
1999  (Introduced  January  6, 
1999) 

The  bill  provides  judicial  and  a  d- 
ministrative  proceedings  for  the 
resolution  of  Year  2000  proces  s- 
ing  failures.  Among  other  things, 
the  bill  requires  the  clerk  of  the 
court  receiving  a  Y2K-related 
complaint  to  refer  that  complaint 
to  a  mandatory  arbitration  pro¬ 
ceeding,  sets  forth  a  standard  of 
proof  for  recovering  damages  for 
Y2K-related  failures,  and  places 
a  cap  on  punitive  damages. 
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ACRONYMS  USED  IN  THIS  REPORT 


AGA 

AHA 

AMA 

AMSA 

AMWA 

AOPL 

APCO 

APGA 

APPA 

APTA 

ATA 

ATC 

ATIS 

ATS 

AWWA 

BCAG 

CAD 

CEA 

CEO 

CIO 

CMA 

COTS 

CPE 

CPI 

CRASH 

CSB 

CSREES 

DCS 

DOC 

DOE 

DOJ 

EC 

EDI 

EEI 

EMS 

EPA 

EPRI 

ERISA 

FAA 


American  Gas  Association 

American  Hospital  Association 

American  Medical  Association 

Association  of  Metropolitan  Sewerage  Agencies 

Association  of  Metropolitan  Water  Agencies 

Association  of  Oil  Pi  pelines 

Association  of  Public  Safety  Communications  Officials 

American  Public  Gas  Association 

American  Public  Power  Association 

American  Public  Transit  Association 

Air  Transportation  Association 

Air  Traffic  Control 

Alliance  for  Telecommunications  Industry  Solutions 
Air  Traffic  System 

American  Water  Works  Association 

Boeing  Commercial  Aircraft  Group 

Computer  Aided  Dispatch 

Canadian  Electric  Association 

Chief  Executive  Officer 

Chief  Information  Officer 

Chemical  Manufacturers  Association 

Commercial  Off-The-Shelf  Software 

Customer  Premise  Equipment 

Chemical  Process  Industries 

Computer  Remediation  and  Shareholder 

Chemical  Safety  and  Hazard  Investigation  B  oard 

Cooperative  State  Research,  Education,  Extension  Office 

Digital  Control  System 

Department  of  Commerce 

Department  of  Energy 

Department  of  Justice 

Electronic  Commerce 

Electronic  Data  Interchange 

Edison  Electric  I  nstitute 

Emergency  Medical  Services 

Environmental  Protection  Agency 

Electric  Power  Research  Institute 

Employee  Retirement  Income  Security  Act 

Federal  Aviation  Administration 
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FCC 

FDA 

FDIC 

FERC 

FFIEC 

FRB 

GAO 

GETS 

GISB 

GPA 

GRI 

GSA 

HCFA 

HF 

HIMA 

HUD 

HVAC 

IATA 

ICAO 

ICI 

INGAA 

IPAA 

IT 

ITAA 

ITU 

JCAHO 

JIT 

LANs 

LNP 

MEP 

MOU 

MTA 

NACO 

NAS 

NASA 

NASIRE 

NATCA 

NATO 

NAWC 

NCS 

NCUA 

NEI 

NERC 


Federal  Communications  Commission 

Food  and  Drug  Administration 

Federal  Deposit  Insurance  Corporation 

Federal  Energy  Regulatory  Commission 

Federal  Financial  Institutions  Examination  Council 

Federal  Reserve  Board 

General  Accounting  Office 

Government  Energy  Telecommun  ications  System 

Gas  Industries  Standard  Board 

Gas  Processors  Association 

Gas  Research  Institute 

Government  Service  Administration 

Healthcare  Finance  Agency 

High  Frequency 

Health  Industry  Manufacturers  Association 
Housing  and  Urban  Development 
Heating,  Ventilation  and  Air  Conditioning 
International  Air  Transport  Association 
International  Civil  Aviation  Organization 
Investment  Company  Institute 
Interstate  Natural  Gas  Association  of  America 
Independent  Petroleum  Association  of  America 
Information  Technology 

Information  Technology  Association  of  America 

International  Telecommunications  Union 

Joint  Commission  Accreditation  of  Healthcare  Association 

Just  in  time 

Local  Area  Networks 

Local  Number  Portability 

Manufacturing  Extension  Program 

Memorandum  of  Understanding 

Mass  Transit  Agencies 

National  Association  of  Countries 

National  Airspace  System 

National  Air  and  Space  Admi  nistration 

National  Association  of  State  Information  Resource  Executives 

National  Air  Traffic  Controllers 

North  American  Treaty  Organization 

National  Association  of  Water  Companies 

National  Communications  System 

National  Credit  Union  Administration 

Nuclear  Energy  Institute 

North  American  Electric  Reliability  Council 
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NFIB 

NGA 

NGC 

NGSA 

NIST 

NPGA 

NPRA 

NRC 

NRECA 

NRIC 

NSF 

NSTAC 

OCC 

OECD 

OIG 

OMB 

OPM 

OTS 

PBX 

PCCIP 

PMAA 

PN 

PSAP 

PSN 

PTTC 

PUC 

PWBA 

PWS 

RUS 

RTU 

SBA 

SCADA 

SEC 

SIA 

USDA 

VA 

WEMA 


National  Federation  of  Independent  Business 

National  Governors  Association 

National  Gas  Association 

National  Gas  Supply  Associ  ation 

National  Institute  of  Standard  and  Technology 

National  Propane  Gas  Association 

National  Petroleum  and  Refiners  Association 

Nuclear  Regulatory  Commission 

National  Rural  Electric  Cooperative  Association 

Network  Reliability  and  Interoperability  Council 

National  Science  Foundation 

National  Security  Telecommunications  Advisory  Committee 

Office  of  the  Comptroller  of  the  Currency 

Organization  for  Economical  Cooperation  and  Development 

Office  of  the  Inspector  General 

Office  of  Management  Budget 

Office  of  Personal  Management 

Office  of  Thrift  Supervision 

Private  Branch  Exchange  Equipment 

President’s  Commission  on  Critical  Infrastructure  Protection 

Petroleum  Marketers  Association  of  America 

Public  Network 

Public  Safety  Answering  Points 

Public  Switch  Network 

Petroleum  Technology  Transfer  Council 

Public  Utility  Commission 

Pension  and  Welfare  Benefits  Administration 

Public  Water  System 

Rural  Utilities  Service 

Remote  Terminal  Units 

Small  Business  Administration 

Supervisory  Control  and  Data  Acquisition 

Securities  Exchange  Commission 

Securities  Industry  Association 

United  States  Department  of  Agriculture 

Veterans  Administration 

Water  Equipment  Manufacturers  Association 
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Y2K  SOLUTION  APPROACHES 


There  are  multiple  solutions  to  the  problem. 
Each  has  some  merit,  such  as  quick 
implementation  time,  and  some  drawbacks, 
such  as  limited  ranges  of  applicability.  For  a 
relative  comparison  of  these  techniques  and 
how  long  they  take  to  implement,  see  figure  I1. 

•  Data-date  expansion:  Convert  all  two-digit 
dates  to  four  digits  in  the  data  files. 

•  Software-date  expansion:  Handle  the  date 
expansion  requirements  in  the  software 
doing  the  calculation. 

•  Compliant  commercial  software:  Purchase 
Y2K  compliant  software  that  meets  your 
needs. 

•  Binary  date  encoding:  Modify  the  software  to 
represent  dates  at  the  bit  level.  Two  bytes, 
or  16  bits,  can  account  for  over  65,000 
years. 

•  Database  duplication:  Develop  two-  and 
four-digit  versions  of  databases  to  work  with 
compliant  and  non-compliant  software. 


•  Redevelop  software:  Redo  the 
application  software  so  that  it 
becomes  compliant. 

•  Year  interception:  Catch  all  date 
calculations  and  replace  erroneous 
results  with  correct  ones. 

•  Windowing:  Choose  an  appropriate 
year,  for  example  1 950,  and  process 
all  years  between  50  and  99  as  20th 
century  dates,  all  years  between  00 
and  49  as  21st  century  dates. 

•  Year  shifting:  Use  the  28-year  cycle 
of  the  calendar  and  shift  dates  until 
all  dates  that  need  to  be  processed 
are  in  the  same  century. 

Manual:  Reinstitute  non-automated 
processes. 

1  “Year  2000  Survival  Guide,”  Edmund  X. 

DeJesus,  BYTE  Magazine,  July  1998,  p.  53. 
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Figure  1.  Relative  Comparison  of  Y2K  Solutions 
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